Cloud Security Risk & Compliance Specialist

Amazon Web Services (AWS); Arlington (VA); On-site; USD 56,000 - 97,000; Full time

Benefits offered by this job

Health insurance

RSUs

401(k) matching

Paid time off

Parental leave

Adoption and Surrogacy Reimbursement

Job summary

Amazon Web Services, Inc. is seeking a risk specialist to conduct risk assessments across security controls and tools, ensuring readiness for external compliance obligations.

You will collaborate with multiple AWS divisions and external auditors, documenting risk governance and control implementation while engaging diverse stakeholders. The role emphasizes learning AWS security controls, understanding new services, and owning the program vision with a strong focus on ownership, diversity,

Qualifications

• Bachelor's degree in a relevant field.
• 2+ years of security, audits, risk assessments, and/or controls experience.
• Experience assessing complex technical processes or controls.

Responsibilities

• Understand risk management and governance processes quickly and efficiently.
• Write, articulate, and develop security risk documentation.
• Review evidence illustrating key controls across the AWS environment.
• Communicate operational processes around AWS security practices and control implementations.
• Inform leadership of key risks and program improvement areas; coordinate cross‑functional efforts.
• Collaborate with internal stakeholders across security, risk, and compliance functions.
• Develop broad domain knowledge of AWS control activities and communicate with technical communities.

Education

Bachelor's degree in Computer Science, Information Systems, Finance, Accounting, or a related field

2+ years of security, audits, risk assessments, or controls experience

Job description

Amazon Web Services, Inc. is seeking a risk specialist to conduct risk assessments across security controls and tools, ensuring readiness for external compliance obligations.

You will collaborate with multiple AWS divisions and external auditors, documenting risk governance and control implementation while engaging diverse stakeholders. The role emphasizes learning AWS security controls, understanding new services, and owning the program vision with a strong focus on ownership, diversity,