Career profile
Amy Herzog
Chief Information Security Officer and Vice President, Amazon Web Services (AWS)
- Current role, per sources checked 18 June 2025
- June 2025
Amy Herzog is the Chief Information Security Officer and vice president of Amazon Web Services, appointed in June 2025.
Career path
Herzog began her career as a principal security engineer at the MITRE Corporation, where she worked for more than fifteen years and was co-inventor of two patents related to cybersecurity.
She later held IT management positions at Travelers insurance and at Pivotal, which was acquired by VMware in December 2019.
Herzog joined Amazon in February 2023.
Before moving to AWS, she served as CISO of Amazon's Ads and Devices organization, and more broadly oversaw security for Amazon's devices and services, media and entertainment, and advertising businesses, including Ring, Alexa and Amazon Leo.
She was appointed AWS CISO in June 2025.
Public remarks and published statements
At AWS's re:Inforce cybersecurity conference in Philadelphia on June 17, 2025, Herzog argued that strong security practices can speed enterprise adoption of generative AI rather than slow it down. "Security, when done right, can be a true enabler in adopting new technologies," Herzog said. She told the conference that customers with mature security practices were adopting generative AI faster, and that regulated industries such as finance and healthcare were using existing security and data-management controls to scale AI use cases. She also described how Amazon's AI-assisted testing process shortened the time needed to vet third-party models for the Bedrock service.
In an October 2024 interview about securing Ring and Alexa, Herzog described embedding security into product development from the design phase so that cyber and product teams work together rather than applying fixes after release. In a 2024 interview with CSO Online, she described Amazon's approach of bringing security specialists into design discussions early and running security scans throughout the coding lifecycle rather than only before launch. She also discussed Amazon's use of adversarial prompts and red-team exercises to test AI models for security issues before release.
As AWS CISO, Herzog appeared on the FBI's Ahead of the Threat podcast to discuss AI-enabled threats, nation-state targeting of critical infrastructure through third-party access, and defending cloud infrastructure at scale, describing how her threat intelligence teams identified an actor using commercial AI tools to compromise more than 600 network devices across 55 countries.
