When did CISO Tribune verify this seat?

CISO Tribune verified this seat on November 8, 2026 from IT Brew profile (August 2025), as part of its roster of named security leaders.

Who are the security chiefs at other Technology organizations?

On CISO Tribune's record they include Lucas Moody at Astera Labs, Amy Herzog at AWS, Victor Chang at Backstory and Anupam Saha at Biz2X.

Who does the security chief of Amazon report to?

Amazon's fiscal 2025 Form 10-K, filed February 6, 2026, says its chief security officer reports to the Chief Executive Officer.

Which board body oversees cybersecurity at Amazon?

Amazon's fiscal 2025 Form 10-K places oversight of cybersecurity risk with the Security Committee.

Company record

Amazon CISO: CJ Moses

The current Chief Information Security Officer and VP of Security Engineering of Amazon is CJ Moses, per IT Brew profile (August 2025). CISO Tribune verified this on November 8, 2026.

Career profile: CJ Moses on CISO Spotlights ↗

What Amazon tells the SEC

Its fiscal 2025 Form 10-K, filed February 6, 2026, carries an Item 1C cybersecurity disclosure that describes a chief security officer reporting to the Chief Executive Officer, with oversight by the Security Committee. Read the section verbatim or the filing on sec.gov. A filing describes governance as of its date, not today's seat.

Roster record last verified November 8, 2026 · Updated November 8, 2026

Where Amazon appears on the record (2)

Every page on CISO Tribune and its network that carries this company, 2 in all.

SEC filing: Form 10-K cybersecurity disclosure, fiscal 2025 · Item 1C, filed February 6, 2026
Career profile: CJ Moses on CISO Spotlights ↗

About Amazon

CISO Tribune's Leadership Bench files Amazon under Technology and North America. The SEC classifies it under standard industrial classification 5961, Retail-catalog & mail-order houses, and EDGAR lists its ticker as AMZN.

What Amazon's 10-K says about security governance

Amazon's fiscal 2025 Form 10-K, filed February 6, 2026, describes its cybersecurity governance in Item 1C. The lines below are that filing's own statements, each with the sentence it comes from.

Reporting line: the chief security officer reports to the Chief Executive Officer.
“Our chief security officer, who has extensive cybersecurity knowledge and skills gained from over 15 years of work experience on the security team at Amazon and an extensive career in the technology and cybersecurity industries as a senior executive in the federal government, heads the team responsible for implementing and maintaining cybersecurity and data protection practices at Amazon and reports directly to the Chief Executive Officer.”
Board oversight: the Security Committee.
“The Security Committee, which is comprised of independent directors, oversees our policies and procedures for protecting our cybersecurity infrastructure and for compliance with applicable data protection and security regulations, and related risks.”
How often the board or committee hears about it: at least annually.
“The Security Committee receives reports regarding such risks from management, including our chief security officer, and reports to the Board at least annually.”
Experience of the security leadership, as the filing states it:
“Our chief security officer, who has extensive cybersecurity knowledge and skills gained from over 15 years of work experience on the security team at Amazon and an extensive career in the technology and cybersecurity industries as a senior executive in the federal government, heads the team responsible for implementing and maintaining cybersecurity and data protection practices at Amazon and reports directly to the Chief Executive Officer.”

Plain-English reading and full text of the filing · the filing on sec.gov

Moves by people who came from Amazon

2026-08-24

David Soto named Chief Information Security Officer at Trellix

Previously Head of Infrastructure Security at Amazon

2025-06-02

Amy Herzog named Chief Information Security Officer (CISO) at AWS

Previously CISO of Amazon Ads Devices and Specialized Business organizations at Amazon

2025-03-17

Vari Bindra named Chief Information Security Officer at Life360

Previously security, risk, and privacy lead for Amazon Retail Stores at Amazon

What CJ Moses has said in public

CISO Tribune's Voices section carries 3 public posts and talks by CJ Moses. The most recent are listed with their dates.

On PHP-based web shell threats identified by Amazon threat intelligence, LinkedIn, October 21, 2026.
On security leadership lessons from a major tech company's security chief, The San Francisco Tribune, October 20, 2026.
On an AI-driven cybersecurity podcast launch featuring a prominent security executive, TNW | Contributed, October 20, 2026.

CJ Moses's record

Security chiefs at other Technology organizations

Other organizations CISO Tribune files under Technology with a named security chief on record: those in North America first, in alphabetical order from Amazon onward.

Astera Labs: Lucas Moody, Chief Information Security Officer.
AWS: Amy Herzog, Chief Information Security Officer (CISO).
Backstory: Victor Chang, Chief Information Security Officer.
Biz2X: Anupam Saha, Chief Information Security Officer (CISO).
Blue Mountain: Paul Adams, Chief Information Security Officer.
Box: Heather Ceylan, Chief Information Security Officer.
C1.ai: William Bengtson, CISO.
CDK Global: Sergey Tsygalnitsky, CISO (Chief Information Security Officer).

The full Technology bench

Questions CISOs ask about Amazon

Who is the CISO of Amazon?: The current Chief Information Security Officer and VP of Security Engineering of Amazon is CJ Moses, per IT Brew profile (August 2025).
When did CISO Tribune verify this seat?: CISO Tribune verified this seat on November 8, 2026 from IT Brew profile (August 2025), as part of its roster of named security leaders.
Who are the security chiefs at other Technology organizations?: On CISO Tribune's record they include Lucas Moody at Astera Labs, Amy Herzog at AWS, Victor Chang at Backstory and Anupam Saha at Biz2X.
Has CJ Moses spoken or written publicly?: CISO Tribune's Voices section carries 3 public posts and talks by CJ Moses, the most recent dated October 21, 2026.
Who does the security chief of Amazon report to?: Amazon's fiscal 2025 Form 10-K, filed February 6, 2026, says its chief security officer reports to the Chief Executive Officer.
Which board body oversees cybersecurity at Amazon?: Amazon's fiscal 2025 Form 10-K places oversight of cybersecurity risk with the Security Committee.

Related guides

CISO Reporting Structure, the Five Models and What the Filings Show
Most security chiefs report into technology leadership (64%), the rest to business leaders. The five models, their trade-offs and what 10-K filings show.
CISO News: Tracking Every Appointment and Departure in the Top Security Seat
CISO Tribune records every CISO appointment and departure as a sourced, dated entry, not a column: 466 moves to date, each with a primary source and a confirmed-or-reported label.
CISO, CSO, VP of Security, Head of Security: What the Titles Mean and What the Record Shows
A chief information security officer (CISO) owns information security. A chief security officer (CSO) usually adds physical security and investigations.