Amazon - Program Manager - Security

- Interested in devices such as Amazon's Fire Tablets and Fire TV? Are you excited by the challenge and sense of ownership that comes from leading projects at Amazonian scale? Do you enjoy working in a fast-paced environment, solving complex operations and technical problems by delivering innovative solutions? If so, then we want to talk to you!

We are the team that manages the app catalog for Amazon's Fire Tablets and Fire TVs. The Amazon Appstore team leverages Amazon's experience in retail, technology, digital content, and mobile services to build a world-class Appstore experience for devices such as the Kindle Fire Tablets, Fire TV, and Android-based smartphones. Devices are becoming increasingly sophisticated and pervasive, and they are enabling customers to access content, applications, and services anywhere. This team drives the ingestion and certification process for every Android app in our store. This involves managing the entire app life cycle - from the moment a developer submits to the time it's live and consumed by the public - to ensure a high-quality experience for Fire Tablet and Fire TV users.

We are seeking an energetic, detail-oriented, Catalog Security Program Manager to own the catalog security and catalog fraud prevention program for Amazon's Appstore. You will develop and manage initiatives to ensure new app submissions and updates are free of malware, adware, or other potentially unwanted applications (PUAs).

- You will lead and define the global content security policies, risk management strategy, organizational structure, processes, and systems required to manage digital security of content operations, on Amazon and non-Amazon Android devices. In addition to app security you and your team will also focus on fraud detection and identification of bad actors.

- You- ll work closely with other fraud prevention teams and external security vendors to build profiles and use machine learning techniques to catch fraudulent vendors.

- You will also partner with program and product management teams to propose improvement opportunities, brainstorm solutions, and drive resolution. Above all, you will play a vital role in helping us meet our app selection expansion goals while protecting our high-quality customer experience.

- The right person for this role will have solid experience delivering successful projects, and managing deadlines and risks across multiple global teams. She/he will be able to effectively communicate, both orally and in written form, to stakeholders and cross-functional team members to deliver scalable programs and launch cool new devices and features to global customers.

Our environment is very fast-paced and requires someone who is flexible, energetic, and a "doer". Someone who's very detailed oriented with a bias for action who holds high personal standards and is comfortable tracking many threads across many teams.

As Content Security Program Manager, you will own end-to-end project & process delivery for catalog security projects and coordinate across multiple cross-functional and globally-based teams to make things happen. You and your team will deliver results when faced with ambiguous circumstances and roadblocks. Your judgment and intuition are right, a lot, and you know when to ask the right questions.

As a Catalog Security Program Manager you will:-

- Scope and deliver business-critical initiatives with end-to-end program's strategy and roadmap for a global program - Catalog Security

- You and your team will document requirements, write clear and detailed functional specifications, and drive delivery of projects in close collaboration with other team members.

- Own catalog security and catalog fraud-prevention policies and identify and drive operational process improvements and system enhancements.

- Provide subject matter expertise to Appstore stakeholders and represent the Catalog Security team to senior Appstore leadership. Drive security policy escalations to closure.

- Manage the team that downloads, installs, and tests apps on Fire Tablets, Fire TV, and non-Amazon devices to ensure digital content adheres to Amazon's app security policies and quality bar.

- Work with the program management teams to address security issues as required.

- Manage vendor relationships with third-party security partners.

- Sift through massive volumes of data using BI tools to identify bad actors and build profiles to assist in bad actor detection.

- Audit assumptions and drive change with data-driven analysis and decision-making.

Basic Qualifications

- Bachelor's degree with concentration in Business, Information Security, Information Technology or Computer Science (or other technical field).

- Program and People manager with 4+ years of experience managing complex projects with technical teams, aggressive schedules and scarce resources.

- 2+ years of work experience in IT or IT Security field focused on threats, vulnerabilities, and attack vectors in a technology, digital media industry, or equivalent field. Experience managing Android app security content evaluation and mobile application development experience is a plus.

- Demonstrated experience and success at leading cross functional programs and validated ability to influence and lead without direct management authority; in or with Operations teams. Effectively manage dependencies and bottlenecks, provide escalations management, anticipate and make trade-offs, balance the business need versus technical constraints and minimize business benefit while building great customer experience.

- Excellent communication skills, oral and written. Experience communicating effectively across a multitude of platforms with remote team members

- Expert understanding of the tools, tactics, and motivation of bad actors.

- Expert technical understanding of Android APKs, Android malware, adware, and other PUAs.

- Expert level understanding of technical security controls and countermeasures such as antivirus, firewalls, intrusion detection/prevention, and content filters.

- Experience with the identification and classification of malware families based on standard taxonomy.

- Having one or more of the following InfoSec certifications (CISSP, CEH, GSEC, GPEN, CISM, SSCP, CompTIA Security+, CompTIA Mobile App Security+) is a plus.

- Experience in project management methodologies, business analysis, or process improvement.

- Technical fluency; comfort understanding and discussing architectural concepts, schedule trade-offs and new opportunities with technical team members

- Ability to synthesize data and leverage advanced SQL/BI tools/analytics to formulate sound program objectives and goals. Goal driven and target orientated whilst able to step back and look at the bigger picture