Device Security & Compliance Lead - GRC & AI-Driven

VulnU; Seattle, Northern (WA, KY); Hybrid; USD 119,000 - 209,000; Full time

Job summary

Amazon’s Devices & Services Compliance Team is seeking a Security Industry Specialist to design scalable governance, risk, and compliance frameworks for security assurance across devices such as Kindle, Alexa, Echo, and Fire tablets.

You will translate evolving regulations, including the EU Cyber Resilience Act, into control designs, collaborate with security, legal, and engineering teams, and drive remediation strategies to completion while shaping AI-first compliance processes.

Qualifications

• Bachelor’s degree or equivalent in Information Security, Computer Science, Risk Management, Engineering, Math, Statistics, or related discipline.
• 7+ years of security, compliance and risk management experience.
• Knowledge of access-control systems, network security, application security, cryptography, operations security.

Responsibilities

• Design and drive scalable Governance, Risk, and Compliance (GRC) frameworks for security assurance across Amazon devices.
• Assess and mitigate security compliance risks with remediation strategies and leadership-ready recommendations.
• Translate evolving regulations like the EU Cyber Resilience Act into control designs aligned with ISO 27001 and security audits.
• Create repeatable processes for security control design, testing, and validation for multiple teams.

Skills

GRC frameworks

Regulatory compliance

Risk assessment

ISO 27001

NIST CSF

Education

Bachelor’s degree or equivalent in Information Security, Computer Science, Risk Management, Engineering, Math, Statistics

Tools

AWS tech stack

Job description

Amazon’s Devices & Services Compliance Team is seeking a Security Industry Specialist to design scalable governance, risk, and compliance frameworks for security assurance across devices such as Kindle, Alexa, Echo, and Fire tablets.

You will translate evolving regulations, including the EU Cyber Resilience Act, into control designs, collaborate with security, legal, and engineering teams, and drive remediation strategies to completion while shaping AI-first compliance processes.