Cloud Security Risk Strategist: Controls & Compliance

Amazon Web Services (AWS); Seattle (WA); On-site; USD 83,000 - 146,000; Full time

Job summary

Amazon Web Services, Inc. is seeking an experienced Security Risk Specialist to own risk assessments of AWS services and security controls from start to finish, translating customer, regulator and audit framework goals into clear control expectations.

You will drive documentation, risk-based decisions, and cross-team collaboration to strengthen assurance for internal and external customers. You will work across multiple AWS service teams, refining assessment processes, mentoring newer team

Qualifications

• 3+ years of auditing business processes, risk mitigation, program compliance or internal audits experience.
• 5+ years of work in relevant industries such as law, customer service, investigations, risk, compliance or project management experience.
• 5+ years of customer service experience.
• Experience in audits related to business processes, risk mitigation, program compliance, or internal audits.
• Experience in customer service.
• Experience working in relevant industries such as law, customer service, investigations, risk, compliance or project management.

Responsibilities

• Own end-to-end risk assessments for AWS services and security controls: scoping, evidence review, risk determination and final documentation, with minimal oversight.
• Assess complex technical and operational processes across multiple AWS services, then find control gaps and practical ways to fix them.
• Write and maintain high-quality security risk documentation, governance processes and assessment procedures, and set the documentation standard for the team.
• Review and challenge evidence to confirm that key controls exist and work as intended across the AWS environment.
• Turn customer, regulatory and third-party framework requirements into clear control expectations for service teams.
• Present key risks, trends and program improvements to leadership with data-driven recommendations, and push improvement efforts through to completion.
• Act as a trusted advisor to service teams and AWS technical communities, explaining how controls are implemented and helping teams prepare for assessments.
• Find recurring problems in the assessment process and lead improvements that make it more consistent, scalable and efficient.
• Handle escalations and complex requests together with stakeholders across AWS security, risk and compliance.

Skills

Auditing

Risk assessment

Compliance

Customer service

Education

Bachelor's degree or equivalent

Master's degree

Professional certification (CAMS/CRCM/CRP)

Tools

Microsoft Office

Job description

Amazon Web Services, Inc. is seeking an experienced Security Risk Specialist to own risk assessments of AWS services and security controls from start to finish, translating customer, regulator and audit framework goals into clear control expectations.

You will drive documentation, risk-based decisions, and cross-team collaboration to strengthen assurance for internal and external customers. You will work across multiple AWS service teams, refining assessment processes, mentoring newer team