Cloud Security Assurance & Compliance Specialist

Amazon Web Services (AWS); Herndon (VA); On-site; USD 102,000 - 178,000; Full time

Benefits offered by this job

RSUs

Health insurance

401(k) matching

Paid time off

Job summary

Amazon Web Services, Inc. is seeking a technically deep Industry Specialist to own far-reaching security projects across AWS at scale.

You will work within AWS Compliance and Security Assurance to drive improvements, develop tooling, and enable regulated markets, including healthcare, finance, and government. You will dive into AWS control environments, set strategic direction, and partner with service teams and auditors to articulate compliance implications.

Qualifications

• Bachelor’s degree or equivalent practical experience in CS/IS/M; or related fields.
• 5+ years of experience in security, audits, customer trust, control assessments, or risk assessments.
• 3+ years of experience assessing complex technical processes.
• Experience with audit or risk program design, control environment process documentation, and control mapping.
• Experience with monitoring and automating security controls.
• Experience in third-party and/or internal audit examinations.
• Demonstrates high judgement and risk decision making abilities.
• Experience in performing technical assessments and documentation of network, OS, and application security; auditing IT processes; understanding key controls across industry best practices.
• Experience understanding the risk profile of emerging AI technologies.

Responsibilities

• Develop a deep understanding of AWS security controls and operational services.
• Understand the internal security control framework and compliance assessment processes.
• Assess risk of emerging AI platforms and integrate into assessment processes.
• Perform service and feature assessment work for audits and customers.
• Work with teams to develop tooling that improves AWS security posture.
• Identify process improvements and high-risk areas.
• Collaborate with service owners on innovative technical solutions.
• Manage build and deployment of new tooling for security initiatives.
• Support security-related projects coordination and reporting.
• Communicate results to stakeholders and auditors.

Skills

Security audits

Control assessments

Risk assessments

Audit design

Security controls

Technical assessments

Risk judgement

AI risk

Education

Bachelor’s degree or higher in CS/ISM/Math/Accounting or related field

Job description

Amazon Web Services, Inc. is seeking a technically deep Industry Specialist to own far-reaching security projects across AWS at scale.

You will work within AWS Compliance and Security Assurance to drive improvements, develop tooling, and enable regulated markets, including healthcare, finance, and government. You will dive into AWS control environments, set strategic direction, and partner with service teams and auditors to articulate compliance implications.