Security Assurance Lead: Regulatory Compliance & Audits

Amazon Web Services (AWS); Arlington (VA); On-site; USD 119,000 - 209,000; Full time

Job summary

Amazon Web Services, Inc. is seeking a highly motivated assurance expert to manage targeted campaigns addressing complex compliance challenges and drive efficiencies across the security assurance organization.

You will collaborate with multiple teams to grow and scale internal compliance processes in global markets. The role focuses on end-to-end regulatory examination delivery, evidence collection, and risk-based analysis to ensure AWS services meet regulatory expectations.

Qualifications

• Bachelor's degree or equivalent in information security, CS, risk management, engineering, math, or statistics.
• 5+ years in HR, privacy, legal, compliance or risk management.
• 7+ years of program, project, or product management experience.
• 5+ years in regulatory frameworks and policy analysis methodologies.
• 8+ years in compliance, audit or risk management.
• Certifications such as CISA, CISSP, CISM, CCSP, CRISC or equivalent.

Responsibilities

• Own end-to-end regulatory examination delivery from planning to reporting.
• Develop and execute evidence collection strategies across AWS service teams.
• Analyze regulatory obligations to determine applicability and compliance posture.
• Serve as point of contact for external regulators; manage ARLs and responses.
• Coordinate with internal AWS teams to resolve ambiguities and align messaging.
• Identify compliance gaps and escalation with root-cause analysis.
• Develop SME expertise in one or more regulatory jurisdictions.

Skills

Regulatory knowledge

Stakeholder management

Program management

Risk assessment

Cloud security

Education

Bachelor's degree in information security / related field

5+ years HR, privacy, legal, compliance or risk management

Job description

Amazon Web Services, Inc. is seeking a highly motivated assurance expert to manage targeted campaigns addressing complex compliance challenges and drive efficiencies across the security assurance organization.

You will collaborate with multiple teams to grow and scale internal compliance processes in global markets. The role focuses on end-to-end regulatory examination delivery, evidence collection, and risk-based analysis to ensure AWS services meet regulatory expectations.