AWS Security Risk Specialist — Governance & Compliance Expert

VulnU; Herndon (VA); On-site; USD 83,000 - 146,000; Full time

Benefits offered by this job

Paid parental leave

Retirement match

Equity

Flexible PTO

Job summary

Amazon Web Services (AWS) is seeking an experienced Security Risk Specialist to own risk assessments of AWS services and security controls from scoping through final documentation. You will turn regulatory and third-party framework requirements into clear control expectations and present findings to leadership.

The role involves working across many AWS service teams, improving assessment processes, and guiding teams to meet external compliance obligations.

Qualifications

• 3+ years of auditing business processes, risk mitigation, program compliance or internal audits experience.
• 5+ years of work in industries such as law, customer service, investigations, risk, compliance or project management.
• Bachelor's degree or equivalent required; professional certification preferred.

Responsibilities

• Own end-to-end risk assessments for AWS services and security controls: scoping, evidence review, risk determination and final documentation.
• Assess complex technical and operational processes across multiple AWS services, identify control gaps and practical fixes.
• Write and maintain high-quality security risk documentation, governance processes and assessment procedures.

Skills

Auditing

Risk management

Security controls

Data-driven decisions

Regulatory compliance

Education

Bachelor's degree or equivalent

CAMS, CRCM, or CRP certification

Tools

Microsoft Office

Job description

Amazon Web Services (AWS) is seeking an experienced Security Risk Specialist to own risk assessments of AWS services and security controls from scoping through final documentation. You will turn regulatory and third-party framework requirements into clear control expectations and present findings to leadership.

The role involves working across many AWS service teams, improving assessment processes, and guiding teams to meet external compliance obligations.