Cloud Security Risk & Compliance Specialist

Amazon Web Services (AWS); Herndon (VA); On-site; USD 83,000 - 146,000; Full time

Benefits offered by this job

Health insurance

401(k) matching

Paid time off

Parental leave

Job summary

Amazon Web Services, Inc. is seeking an experienced Security Risk Specialist to own end-to-end risk assessments for services and security controls, turning regulatory requirements into clear control expectations.

You will review evidence, document risks, and present findings to leadership while collaborating with multiple AWS teams across security and compliance. The role emphasizes working independently in a dynamic environment, developing risk assessment processes, and guiding teams through

Qualifications

• 3+ years of auditing business processes, risk mitigation, program compliance or internal audits experience.
• 5+ years of work in relevant industries such as law, customer service, investigations, risk, compliance or project management experience.
• 5+ years of customer service experience.
• Experience in audits related to business processes, risk mitigation, program compliance, or internal audits.
• Experience in customer service.
• Experience working in relevant industries such as law, customer service, investigations, risk, compliance or project management.
• Experience with all Microsoft Office applications.
• Bachelor's degree or equivalent.

Responsibilities

• Own end-to-end risk assessments for AWS services and security controls: scoping, evidence review, risk determination and final documentation, with minimal oversight.
• Assess complex technical and operational processes across multiple AWS services, then find control gaps and practical ways to fix them.
• Write and maintain high-quality security risk documentation, governance processes and assessment procedures, and set the documentation standard for the team.
• Review and challenge evidence to confirm that key controls exist and work as intended across the AWS environment.
• Turn customer, regulatory and third‑party framework requirements into clear control expectations for service teams.
• Present key risks, trends and program improvements to leadership with data‑driven recommendations, and push improvement efforts through to completion.
• Act as a trusted advisor to service teams and AWS technical communities, explaining how controls are implemented and helping teams prepare for assessments.
• Find recurring problems in the assessment process and lead improvements that make it more consistent, scalable and efficient.
• Handle escalations and complex requests together with stakeholders across AWS security, risk and compliance.

Skills

Auditing processes

Risk mitigation

Program compliance

Internal audits

Customer service

Microsoft Office

Education

Bachelor's degree or equivalent

Job description

Amazon Web Services, Inc. is seeking an experienced Security Risk Specialist to own end-to-end risk assessments for services and security controls, turning regulatory requirements into clear control expectations.

You will review evidence, document risks, and present findings to leadership while collaborating with multiple AWS teams across security and compliance. The role emphasizes working independently in a dynamic environment, developing risk assessment processes, and guiding teams through