Security Assurance Specialist , AWS Compliance & Security Assurance

Amazon Web Services (AWS); Herndon (VA); On-site; USD 102,000 - 178,000; Full time

Benefits offered by this job

RSUs

Health insurance

401(k) matching

Paid time off

Job summary

Amazon Web Services, Inc. is seeking a technically deep Industry Specialist to own far-reaching security projects across AWS at scale.

You will work within AWS Compliance and Security Assurance to drive improvements, develop tooling, and enable regulated markets, including healthcare, finance, and government. You will dive into AWS control environments, set strategic direction, and partner with service teams and auditors to articulate compliance implications.

Qualifications

• Bachelor’s degree or equivalent practical experience in CS/IS/M; or related fields.
• 5+ years of experience in security, audits, customer trust, control assessments, or risk assessments.
• 3+ years of experience assessing complex technical processes.
• Experience with audit or risk program design, control environment process documentation, and control mapping.
• Experience with monitoring and automating security controls.
• Experience in third-party and/or internal audit examinations.
• Demonstrates high judgement and risk decision making abilities.
• Experience in performing technical assessments and documentation of network, OS, and application security; auditing IT processes; understanding key controls across industry best practices.
• Experience understanding the risk profile of emerging AI technologies.

Responsibilities

• Develop a deep understanding of AWS security controls and operational services.
• Understand the internal security control framework and compliance assessment processes.
• Assess risk of emerging AI platforms and integrate into assessment processes.
• Perform service and feature assessment work for audits and customers.
• Work with teams to develop tooling that improves AWS security posture.
• Identify process improvements and high-risk areas.
• Collaborate with service owners on innovative technical solutions.
• Manage build and deployment of new tooling for security initiatives.
• Support security-related projects coordination and reporting.
• Communicate results to stakeholders and auditors.

Skills

Security audits

Control assessments

Risk assessments

Audit design

Security controls

Technical assessments

Risk judgement

AI risk

Education

Bachelor’s degree or higher in CS/ISM/Math/Accounting or related field

Job description

Description

At AWS, Security is priority zero. As part of the Amazon Web Services (AWS) Security team, we are looking for a technically deep Industry Specialist who is passionate about owning far-reaching projects to drive continuous improvement across AWS at unparalleled scale. As a part of AWS Compliance and Security Assurance you’ll have an opportunity to operate in a constantly changing environment, working with AWS business and engineering teams on business-critical, security projects and programs. We work across AWS to drive strategic security initiatives, design and deliver tooling and automation, and continue to raise the bar on security at AWS. Our team also drives programs to enable customers that operate in regulated markets, such as Healthcare, Finance, Government, etc.

In This Role, You Will

• Develop a deep understanding of the operational services, processes, and controls in place that support AWS's security posture.
• Understand our internal security control framework and how it relates to our compliance assessment processes.
• Understand the risk profile of emerging AI platforms and integrate them into our assessment process.
• Perform service, feature, and other related assessment work for customer and audit requirements.
• Work with service, infrastructure and administrative teams to develop and deliver tooling that improves AWS's security posture.
• Identify process improvement opportunities and high-risk areas.
• Work with service owners to develop innovative solutions to complex technical challenges.
• Manage the build and deployment of new tooling to streamline and automate security-related initiatives.
• Support process improvement and security-related projects in coordination with service teams.
• Manage communications to service teams and stakeholders.

A day in the life

• Dive deep into the AWS control environment to develop technical understanding of control implementation, and articulate compliance implications to internal and external audit functions.
• Set strategic direction, improve documentation, track progress, coordinate improvement efforts, and monitor process improvement effectiveness.
• Develop broad domain and technical knowledge in AWS security solutions including the operational processes and controls in place that support AWS compliance programs.
• Monitor, evaluate, and continuously improve the organization by being a trusted advisor, facilitator and creative problem solver.
• Develop and share program/project process frameworks, tools, and best practices that can be adopted throughout the organization.
• Liaise with auditors, articulate control implementation and impact, and establish considerations for applying security, privacy and compliance concepts to a technical cloud environment.
• Effectively communicate compliance program results, including assessment status, workflow, remediation, and reporting, to a broad audience including peers and senior leaders.

About The Team

Diverse Experiences

Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.

Why Amazon Security?

At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores.

Inclusive Team Culture

In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices.

Training & Career Growth

We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.

Work/Life Balance

We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve.

Basic Qualifications

• Bachelor’s Degree in Computer Science, Information Systems Management, Mathematics, Accounting/Auditing, or other related fields or equivalent practical experience.
• 5+ years of experience in security, audits, customer trust, control assessments, or risk assessments.
• 3+ years of experience assessing complex technical processes

Preferred Qualifications

• Experience with audit or risk program design, control environment process documentation, and control mapping
• Experience with monitoring and automating security controls.
• Experience in third-party and/or internal audit examinations.
• Demonstrates high judgement and risk decision making abilities.
• Have experience in performing technical assessments and documentation of network, operating systems, application security, as well as auditing IT processes, including working knowledge of key controls across a number of industry best practices.
• Experience understanding the risk profile of emerging AI technologies.

Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.

The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&DD insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits.

USA, VA, Arlington - 102,000.00 - 178,400.00 USD annually

USA, VA, Herndon - 102,000.00 - 178,400.00 USD annually

USA, WA, Seattle - 102,000.00 - 178,400.00 USD annually

Company

Amazon Web Services, Inc.

Job ID: A10401890