AWS Security & Compliance Controls Expert

VulnU; Herndon (VA); On-site; USD 102,000 - 178,000; Full time

Benefits offered by this job

Paid parental leave

Retirement match

Equity

Flexible PTO

Job summary

Amazon in Herndon, VA seeks a Security Assurance Specialist for AWS Compliance & Security Assurance. You will partner with control owners to document how controls are designed, implemented, and evidenced, ensuring clear coverage and alignment with audits and regulatory requirements.

You will translate complex regulatory and contractual needs into testable controls, map processes to the control framework, and help senior stakeholders drive risk-aware decisions in a fast-paced cloud security

Qualifications

• 5+ years in security, audits, customer trust, control assessments, or risk assessments.
• Experience with audit program design, control environment documentation, and control mapping.
• Experience with monitoring and automating security controls.
• Experience in assessing AI risk and regulatory considerations.

Responsibilities

• Document how controls are designed, implemented and evidenced for internal and audit teams.
• Assess control areas for gaps, overlaps, and coverage across the portfolio.
• Translate regulatory, contractual and policy requirements into actionable controls.
• Understand operational processes and map them to internal control framework.
• Evaluate risks from emerging AI platforms and reflect in control design.

Skills

Security audits

Risk assessment

Regulatory knowledge

Stakeholder communication

Control documentation

Education

Bachelor’s Degree in Computer Science / Information Systems / related field

Tools

Audit tooling

Control mapping

Job description

Amazon in Herndon, VA seeks a Security Assurance Specialist for AWS Compliance & Security Assurance. You will partner with control owners to document how controls are designed, implemented, and evidenced, ensuring clear coverage and alignment with audits and regulatory requirements.

You will translate complex regulatory and contractual needs into testable controls, map processes to the control framework, and help senior stakeholders drive risk-aware decisions in a fast-paced cloud security