IT Auditor, AWS Internal Audit

Amazon Inc.; Seattle (WA); On-site; USD 80,000 - 97,000; Full time

Job summary

Amazon.com Services LLC is seeking a Technology Auditor to assess AWS security and risk. You will analyze architectures, identify risks, and guide control improvements while supporting planning, scoping, and reporting processes.

Strong analytical skills and knowledge of IT security, compliance and regulatory requirements are essential. Role may involve up to 10% travel, including international assignments, and will operate in a fast-paced, business-driven environment with a focus on safeguarding

Qualifications

• Bachelor's degree in Computer Science, Computer Engineering, Information Systems, or related discipline.
• 2+ years of experience with technology risk, IT security audit, compliance or regulatory knowledge.
• Professional auditing qualification or security credentials preferred.

Responsibilities

• Dive deep into complex architectures to identify risks and ensure AWS services are designed and operating securely.
• Support planning, scoping, execution and reporting based on identified risks.
• Provide independent viewpoints to help service teams identify opportunities for control improvements and compliance.

Skills

Technology risk

IT security audit

Compliance

Regulatory knowledge

Education

Bachelor's degree in CS/CE/IS

Tools

SQL

Excel

Job description

Job ID: 10556701 | Amazon.com Services LLC

At Amazon we're working to be the most customer-centric company on earth, and that includes protecting our customers and their data. To get there, we need exceptionally talented, bright, and driven people. Do you have a passion for architecture, security, software design and innovative technologies? Do you see security, compliance and risk management as business enablers?

Amazon’s Internal Audit team is seeking a technology auditor to perform assessments of Amazon Web Services (AWS). You will have the rare opportunity to dive deep into the internal architecture of AWS infrastructure and services to assess operational risks and security posture.

This position will challenge your current understanding of AWS services. You will have a broad technical background and the ability to learn new technology concepts quickly. You are someone who is curious and known for diving deep into subject matter, taking ownership, and encouraging innovative and pragmatic solutions to complex problems. In addition, you will have solid business judgment, enthusiasm for risk management, the ability to gain trust and respect of business leaders, and the capability to guide a fast-paced organization to the right results.

Up to 10% travel may be required, including international travel.

Key job responsibilities

• The ideal candidate is an experienced technology or security professional who can dive deep into a variety of complex architectures, identify risks and ensure AWS services are designed and operating securely.
• You will support the planning, scoping, execution, and reporting based on identified risks. Assessment scope may include identity and access management, key management, data security/privacy, service monitoring, release management, and service availability.
• You will bring independent and objective points of view to provide support to service teams and their partners to identify opportunities for control improvements to mitigate risks, ensure compliance and improve operational performance. In this capacity, you will gain valuable exposure to many areas of our global business.

Basic Qualifications

• Bachelor's degree in Computer Science, Computer Engineering, Information Management, Information Systems, or other related discipline
• 2+ years of experience with technology risk, IT security audit, compliance and/or relevant regulatory knowledge

Preferred Qualifications

• Professional auditing qualification, or similar risk or compliance credentials
• Experience with SQL and Excel
• Experience in any combination of the following: application security frameworks, security code reviews, incident response, secure infrastructure, penetration testing, mobile security, cloud security, AI security, identity and access controls, threat modeling, cryptography, threat intelligence, or secure software development
• Knowledge of one or more of the following domains: access-control system and methodology, network security, application- and system-development security, security architecture and models, cryptography, and operations security
• CISSP, CISA, CISM or other security certification
• Experience that includes strong analytical skills, attention to detail, and effective communication abilities, or experience with programming/scripting (Batch, VB, PowerShell, Java, C#, Chef, Perl, Ruby and/or PHP) and experience in SQL Server/MySQL
• Experience with IT compliance and risk management requirements (e.g. security, privacy, SOX, HIPAA etc.)

Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.

The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits .

Preferred Qualifications

• Professional auditing qualification, or similar risk or compliance credentials
• Experience with SQL and Excel
• Experience in any combination of the following: application security frameworks, security code reviews, incident response, secure infrastructure, penetration testing, mobile security, cloud security, AI security, identity and access controls, threat modeling, cryptography, threat intelligence, or secure software development
• Knowledge of one or more of the following domains: access-control system and methodology, network security, application- and system-development security, security architecture and models, cryptography, and operations security
• CISSP, CISA, CISM or other security certification
• Experience that includes strong analytical skills, attention to detail, and effective communication abilities, or experience with programming/scripting (Batch, VB, PowerShell, Java, C#, Chef, Perl, Ruby and/or PHP) and experience in SQL Server/MySQL
• Experience with IT compliance and risk management requirements (e.g. security, privacy, SOX, HIPAA etc.)

Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.

The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits .

USA, WA, Seattle - 80,200.00 - 97,400.00 USD annually

Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Veterans, military spouses, and people with disabilities are encouraged to apply.