Amazon Risk Management Jobs in Virginia (NOW HIRING)

The US ADC Cluster Security Manager leads all physical security, operational security, and information protection programs across an Amazon Dedicated Cloud (ADC) data center cluster. A cluster consists of multiple accredited data center campuses within a geographic region. This role sets cluster-level security strategy, manages Data Center Security Managers (DCSMs) and Security Operations Managers (SOMs) at each site, and ensures the cluster meets government accreditation requirements while supporting fast-paced classified operations.

You will translate organizational security strategy into cluster-level execution, drive consistency across your sites, and resolve complex security challenges that span multiple facilities. You will advise senior leadership on security posture, risk, and investment decisions. You will shape engagements with government customers and serve as the senior security representative for your cluster - balancing operational requirements, compliance obligations, and business growth.

This position reports to the Regional Security Manager and partners closely with the Security Program Management team, Industrial Security, Data Center Operations leadership, Construction, and state, local and/or federal government organizations.
Key job responsibilities
Cluster Security Strategy & Leadership
- Define and execute the security strategy for all ADC data center campuses within the assigned cluster
- Translate regional and organizational security objectives into actionable plans for individual sites
- Drive consistency in security operations, compliance posture, and incident response across the cluster while accounting for site-specific requirements
- Identify long-term risks and opportunities; propose solutions that address both immediate operational needs and future growth
- Serve as the single-threaded security leader for the cluster - owning decisions on how to prioritize, resource, and execute security requirements
People Leadership & Development
- Lead, develop, and manage Data Center Security Managers and Security Operations Managers within the cluster
- Set clear expectations, provide regular feedback, and conduct performance evaluations
- Build a high-performing team through hiring, onboarding, mentoring, and career development
- Develop succession plans and ensure knowledge continuity across the cluster
- Foster a security culture grounded in operational discipline, continuous improvement, and customer obsession
Government Customer & External Engagement
- Serve as an Amazon security representative to government customer security organizations for the cluster
- Manage recurring customer engagements including security reviews, audit coordination, and compliance discussions
- Interpret and implement evolving government security requirements across all cluster sites
- Influence external stakeholders - including government customers, regulators, and vendor partners - to achieve mutually beneficial security outcomes
- Build and maintain trusted relationships that enable productive collaboration on complex or sensitive security matters
Compliance, Accreditation & Risk Management
- Ensure all cluster facilities maintain continuous compliance with government accreditation requirements (ICDs, NISPOM, NIST, UL 2050, and applicable contract security specifications)
- Own the cluster's security compliance posture - identifying gaps, driving remediation, and reporting status to leadership
- Lead cluster-level security audits, inspections, and self-assessments; drive corrective actions to closure
- Make risk-informed decisions that balance security requirements against operational tempo and business needs
- Coordinate with Industrial Security on workforce compliance, access determinations, and security incident adjudication affecting the cluster
Operational Oversight & Incident Management
- Provide operational oversight of security systems, guard force performance, cleared escort operations, incident response protocols and access control operations across all cluster sites
- Establish cluster-level security metrics and reporting; use data to identify trends, drive improvements, and inform resource decisions
- Own escalation management for security incidents, breaches, and anomalies that exceed site-level authority or span multiple facilities including the generation of written incident reports and executive summaries for consumption by senior and executive leadership.
- Ensure robust after-hours coverage and emergency response capability across the cluster
Financial & Resource Management
- Own the cluster security budget - forecasting requirements, managing spend, reconciling billing and justifying investment to leadership
- Coordinate with the Security Program Management team on capital projects, system upgrades, and security design for new construction
- Manage vendor and contract performance at the cluster level; partner with Procurement on contract actions as needed
- Allocate resources across sites based on risk, operational demand, and growth trajectory
Process Improvement & Standardization
- Streamline security processes across the cluster to reduce complexity, eliminate redundancy, and create predictable operational paths
- Develop and maintain cluster-level Standard Operating Procedures (SOPs) that align with regional and organizational standards
- Identify best practices at individual sites and scale them across the cluster
- Drive continuous improvement informed by audit findings, incident data, government feedback, and operational metrics
A day in the life
The LOW Cluster Security Manager starts each day reviewing security metrics across all data centers in multiple campuses around the cluster.

They meet with Data Center Security Managers and Security Operations Managers to address compliance gaps, incident trends, and guard force performance. They engage other Amazon security organizations on accreditation requirements, audit coordination, and evolving ICD/NISPOM/NIST standards. They partner with Data Center Operations leadership on facility security operations requirements to enable cloud capabilities.

They brief the Regional Security Manager on cluster risk posture and investment needs.
About the team
The U.S. Amazon Dedicated Cloud (ADC) Data Center Security Operations team manages and operates high security data center infrastructure across the United States. The team delivers secure, compliant, and reliable cloud capabilities to government customers by maintaining facilities that meet stringent accreditation standards

The organization encompasses data security operations, physical security equipment sustainment, and design/construction functions, working together to support the full lifecycle of critical infrastructure facilities from design through decommission. The team enables mission-critical workloads by ensuring continuous operations, physical security, and compliance with government requirements while scaling to meet growing customer demand.