IT Auditor, AWS, Internal Audit

Amazon; Seattle (WA); On-site; USD 80,000 - 97,000; Full time

Benefits offered by this job

Health insurance

401(k) matching

Paid time off

Job summary

Amazon in Seattle, WA is seeking a technology auditor to assess AWS architectures for security and operational risk. You will dive deep into internal services, identify gaps, and support planning, scoping, execution, and reporting on risk findings to enable stronger controls across AWS.

This role requires a Bachelor’s in a related field and 2+ years in technology risk or IT security audit, with familiarity in SQL and Excel.

Qualifications

• Bachelor's degree in CS/CE/IS or related discipline.
• 2+ years in technology risk, IT security audit, or compliance.
• Professional auditing credential preferred.
• Experience with SQL and Excel; knowledge of security domains.
• CISSP/CISA/CISM or similar certifications desirable.

Responsibilities

• Assess AWS service architectures for security and risks.
• Plan, scope, execute and report on identified risks.
• Advise service teams to improve controls and compliance.

Skills

Analytical skills

Attention to detail

Effective communication

Programming/scripting

Risk management

Education

Bachelor's degree in CS/CE/IS

Tools

SQL

Excel

PowerShell

Java

C#

SQL Server/MySQL

Job description

At Amazon we're working to be the most customer-centric company on earth, and that includes protecting our customers and their data. To get there, we need exceptionally talented, bright, and driven people. Do you have a passion for architecture, security, software design and innovative technologies? Do you see security, compliance and risk management as business enablers?

Amazon’s Internal Audit team is seeking a technology auditor to perform assessments of Amazon Web Services (AWS). You will have the rare opportunity to dive deep into the internal architecture of AWS infrastructure and services to assess operational risks and security posture.

This position will challenge your current understanding of AWS services. You will have a broad technical background and the ability to learn new technology concepts quickly. You are someone who is curious and known for diving deep into subject matter, taking ownership, and encouraging innovative and pragmatic solutions to complex problems. In addition, you will have solid business judgment, enthusiasm for risk management, the ability to gain trust and respect of business leaders, and the capability to guide a fast-paced organization to the right results.

Up to 10% travel may be required, including international travel.

Key job responsibilities

• The ideal candidate is an experienced technology or security professional who can dive deep into a variety of complex architectures, identify risks and ensure AWS services are designed and operating securely.
• You will support the planning, scoping, execution, and reporting based on identified risks. Assessment scope may include identity and access management, key management, data security/privacy, service monitoring, release management, and service availability.
• You will bring independent and objective points of view to provide support to service teams and their partners to identify opportunities for control improvements to mitigate risks, ensure compliance and improve operational performance. In this capacity, you will gain valuable exposure to many areas of our global business.

Basic Qualifications

• Bachelor's degree in Computer Science, Computer Engineering, Information Management, Information Systems, or other related discipline
• 2+ years of experience with technology risk, IT security audit, compliance and/or relevant regulatory knowledge

Preferred Qualifications

• Professional auditing qualification, or similar risk or compliance credentials
• Experience with SQL and Excel
• Experience in any combination of the following: application security frameworks, security code reviews, incident response, secure infrastructure, penetration testing, mobile security, cloud security, AI security, identity and access controls, threat modeling, cryptography, threat intelligence, or secure software development
• Knowledge of one or more of the following domains: access-control system and methodology, network security, application- and system-development security, security architecture and models, cryptography, and operations security
• CISSP, CISA, CISM or other security certification
• Experience that includes strong analytical skills, attention to detail, and effective communication abilities, or experience with programming/scripting (Batch, VB, PowerShell, Java, C#, Chef, Perl, Ruby and/or PHP) and experience in SQL Server/MySQL
• Experience with IT compliance and risk management requirements (e.g. security, privacy, SOX, HIPAA etc.)

Benefits

Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits .

Location

USA, WA, Seattle - 80,200.00 - 97,400.00 USD annually

Equal Opportunity

Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.

Inclusive Culture

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.