Executive record
Amy Herzog
Amy Herzog is Chief Information Security Officer (CISO) at AWS. The appointment was announced in the week of June 2, 2025, per SecurityWeek Industry Moves.
Before the appointment: CISO of Amazon Ads Devices and Specialized Business organizations at Amazon, per the same source.
1 tracked move on the Wire · Updated
Career timeline
Every move the record holds for Amy Herzog, newest first, with the earlier roles the announcements name.
· Appointment
Named Chief Information Security Officer (CISO) at AWS
Source: SecurityWeek Industry Moves (week of 2025-06-02) ↗ · Move record
Before June 2025· Earlier role
CISO of Amazon Ads Devices and Specialized Business organizations at Amazon
Named in the announcement of the AWS appointment · Source: SecurityWeek Industry Moves (week of 2025-06-02) ↗
The appointment
Announced week of June 2, 2025 · Source: SecurityWeek Industry Moves (week of 2025-06-02) ↗ · Move record
Amy Herzog has been named CISO at AWS, having previously served as CISO of Amazon's Ads Devices and Specialized Business organizations for the past two years. She was appointed following the departure of Chris Betz, who held the AWS CISO role for nearly two years.
CSO Online reports that Herzog, as one of several Amazon CISOs, was responsible for securing advertising products and services as well as hardware devices. Before Herzog joined Amazon in 2023, she held IT management positions at Pivotal, which VMware acquired, and at Travelers insurance, according to CSO Online. CSO Online says Herzog started her career as an engineer for the MITRE Corporation, where she worked for more than 15 years. During her time at MITRE, Herzog co-authored two patents related to cybersecurity, CSO Online reports. CSO Online reports that Herzog has seen the evolution of cloud computing during her career, together with accompanying changes in cloud native security.
Herzog told CSO Online that Amazon begins product development by understanding what customers need, describing this as a working backwards approach. Herzog tells CSO Online that bringing in security specialists early, so they join the design and product teams as collaborative partners, is part of their mantra. Herzog said that rather than code scanning to find and fix issues at the last minute, they do scans throughout the coding lifecycle.
Herzog cited automated scans and ongoing verification steps used to confirm that software updates are properly applied and authentic, CSO Online reports. CSO Online reports that Amazon has a dedicated team of generative AI and security experts who develop security testing and controls for its AI models and services. CSO Online reports that Amazon tests its models with adversarial prompts and with automated and manual red team exercises to find vulnerabilities early.
The company: AWS
- Sector
- Technology
- Region
- North America
- Company record
- Who runs security at AWS: 2 confirmed moves on the record
Appointed in the same period
Other security chiefs in Technology whose appointment was announced within 90 days of Amy Herzog's, nearest first (8 of 10). The Technology bench
Anupam Saha, Chief Information Security Officer (CISO) at Biz2X
Kyle Draisey, Chief Information Security Officer (CISO) and Head of Cybersecurity at Sagent
Elyse Gunn, Chief Information Security Officer (CISO) at Nasuni
Joan Pepin, Chief Information Security Officer at Edge Delta
Michael Adams, Group Vice President (GVP) and Chief Information Security Officer (CISO) at Docusign
Chris Burger, Chief Information Security Officer at F5
Aanchal Gupta, Chief Security Officer (CSO) at Adobe
Ryan Davis, Chief Information Security Officer (CISO) at New Charter Technologies
Record facts
- Time in the seat
- About 1 year 5 months since the appointment was announced (week of June 2, 2025), as of November 2026
- Moves on the record
- 1 confirmed move, each with its source
- On the record since
- September 26, 2026
How these are counted. Time in the seat: Counted in whole months from the announcement of the appointment, the date the record holds; announcements rarely give a start date.
Questions about Amy Herzog
- Who is the CISO of AWS?
- Amy Herzog is Chief Information Security Officer (CISO) at AWS. The appointment was announced in the week of June 2, 2025, per SecurityWeek Industry Moves.
- When did Amy Herzog become CISO of AWS?
- The appointment was announced in the week of June 2, 2025, per SecurityWeek Industry Moves. The record holds the announcement, not a start date.
- Where did Amy Herzog work before AWS?
- Before the appointment, Amy Herzog was CISO of Amazon Ads Devices and Specialized Business organizations at Amazon, according to the announcement (SecurityWeek Industry Moves).
Sources
- 1.SecurityWeek Industry Moves (week of 2025-06-02) ↗: the appointment at AWS, week of June 2, 2025
This record begins with CISO Tribune's tracking in 2026.
Related guides
CISO Podcasts: The Shows That Interview Sitting Security Leaders
Four active podcasts interview sitting CISOs: CISO Series Podcast, Defense in Depth, The New CISO and Risky Business Features. Hosts, cadence, sponsors.
CISO, CSO, VP of Security, Head of Security: What the Titles Mean and What the Record Shows
A chief information security officer (CISO) owns information security. A chief security officer (CSO) usually adds physical security and investigations.
How to Become a CISO: Career Path, Experience and Certifications
There is no CISO degree and no single route to the seat. What the certification bodies, career guides and CISO Tribune's own record show about the path: typical prior roles, the certifications that actually come up, and how long it takes.