Cloud Security Risk Strategist — Flexible Hours

Socket.dev; Seattle (WA); On-site; USD 80,000 - 97,000; Full time

Benefits offered by this job

Health insurance

401(k) matching

Paid time off

Parental leave

Job summary

Amazon Web Services is seeking a risk specialist to perform risk assessments across security controls and ensure readiness of new tools with external compliance obligations. You will document risk governance processes, assess AWS operational controls, and collaborate with multiple stakeholders across security, risk, and compliance.

The role requires strong writing of risk documentation, understanding of control frameworks, and the ability to articulate risks to leadership.

Qualifications

• Bachelor's degree in CS/IS/Finance/Accounting or related field.
• 2+ years in security, audits, and control assessments.
• 2+ years in assessing complex technical processes.

Responsibilities

• Understand risk management and governance processes quickly and efficiently.
• Write, articulate, and develop security risk documentation.
• Review evidence needed to illustrate the key controls across the AWS environment.
• Communicate operational processes around AWS security practices and how controls are implemented.
• Communicate to leadership risks and areas for program improvement and coordinate improvement efforts.
• Field requests in collaboration with internal stakeholders across security, risk, and compliance.
• Dive deep into AWS control environment to develop broad domain knowledge of control activities.
• Bridge communication with stakeholders and AWS technical communities to articulate control implementation.

Skills

Security risk assessment

IT audit

Controls documentation

Governance

Stakeholder communication

Regulatory compliance

Education

Bachelor's degree in CS/IS/Finance/Accounting

Job description

Amazon Web Services is seeking a risk specialist to perform risk assessments across security controls and ensure readiness of new tools with external compliance obligations. You will document risk governance processes, assess AWS operational controls, and collaborate with multiple stakeholders across security, risk, and compliance.

The role requires strong writing of risk documentation, understanding of control frameworks, and the ability to articulate risks to leadership.