Security Compliance Specialist, Amazon Leo Security Assurance

Socket.dev; Arlington (VA); On-site; USD 102,000 - 178,000; Full time

Job summary

Amazon Leo seeks an individual contributor to deliver Governance, Risk and Compliance solutions and collaborate with security teams to assess maturity, design programs, and liaise with auditors and regulators.

This role requires US citizenship or permanent resident status and an active Top Secret clearance. You will interpret NIST SP 800-53, ICD, CNSSI and other government requirements, map controls, prepare evidence for authorizations, and coordinate responses to inquiries.

Qualifications

• 4+ years of information security and compliance experience.
• Bachelor's degree or equivalent.
• Knowledge of AWS or cloud technologies.
• Experience prioritizing and handling multiple assignments while meeting deadlines.
• US government security clearance of top secret or above.
• Security certifications such as CISSP/CISA/CISM are preferred.

Responsibilities

• Interpret NIST SP 800-53, ICD, CNSSI, and other government requirements and define applicability to products and services.
• Map security controls to frameworks, define control intent and evidence expectations, and verify dependencies.
• Write, articulate, and validate security control narratives and compliance documentation (SSPs, SCTMs).
• Review evidence to illustrate key controls across operational environments; coordinate evidence collection.
• Prepare assessment packages, support readiness declarations, and field assessor requests.
• Author Plans of Action and Milestones (POA&Ms) and track remediation to closure.
• Communicate assessment results, compliance posture, risks, and program improvements to stakeholders.
• Coordinate responses to government inquiries and customer compliance requests.
• Develop broad domain understanding of control activities and articulate compliance to assessors.
• Maintain a quality rhythm for managing multiple stakeholder expectations across domains.

Skills

InfoSec experience

Bachelor's degree

AWS / cloud

Multitasking

Top Secret clearance

Security certifications

Govt liaison

Satcom / aerospace security

POA&Ms authoring

Education

Bachelor's degree or equivalent

Job description

Amazon Leo (previously known as Project Kuiper) is an initiative to increase global broadband access through a constellation of over 3,000 Low Earth Orbit (LEO) satellites. Its mission is to bring fast, affordable broadband to unserved and underserved communities worldwide.

At Leo, we are obsessed with customer trust and are seeking an individual contributor who is creative, and passionate about delivering Governance, Risk and Compliance solutions to meet Leo's regulatory and external assurance needs. In this role, you will work collaboratively with various business and security teams across Amazon to identify compliance needs, assess the maturity of processes and controls, design, build, and execute high-impact security or compliance programs and liaise with external auditors and regulators.

Export Control Requirement: Due to applicable export control laws and regulations, candidates must be a U.S. citizen or national, U.S. permanent resident (i.e., current Green Card holder), or lawfully admitted into the U.S. as a refugee or granted asylum.

Security Clearance Requirement: This position requires that the candidate selected be a US Citizen and must currently possess and maintain an active Top Secret security clearance.

Key job responsibilities

• Interpret NIST SP 800-53, Intelligence Community Directives (ICD), Committee on National Security Systems Instruction (CNSSI), and other government compliance requirements and define their applicability to ALG products and services
• Map security controls to applicable frameworks, define control intent and evidence expectations, and verify inherited control dependencies
• Write, articulate, and validate security control narratives and compliance documentation for government authorization packages including SSPs and SCTMs
• Review evidence needed to illustrate key controls across the operational environment, coordinating evidence collection from functional teams
• Prepare assessment packages, support readiness declarations, and field assessor requests during security assessments
• Author Plans of Action and Milestones (POA&Ms) for identified findings and track remediation activities to closure
• Communicate to key stakeholders and leadership on assessment results, compliance posture, key risks, and areas of program improvement
• Coordinate responses to government security inquiries and customer compliance requests
• Dive deep into the control environment to develop broad domain and technical understanding of control activities and articulate compliance to assessors and stakeholders
• Operate a quality rhythm of the business for managing multiple stakeholder expectations simultaneously across compliance domains and authorization timelines

A day in the life

Have you wanted an opportunity to secure an advanced satellite based broadband telecom service? The Leo Security team owns the security of product and operations of Leo end-to-end. We provide the necessary infrastructure and mechanisms to ensure the security of our satellite constellation and provide assurance to our customers and regulators on our security, privacy and resiliency programs. Our team drives the implementation of compliance programs, owns the collaboration with external auditors and regulators.

You will work in a start-up like environment, backed by Amazon's infrastructure to bootstrap security mechanisms, and help instill the security culture in the organization.

About the team

Diverse Experiences

Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn't followed a traditional path, or includes alternative experiences, don't let it stop you from applying.

Why Amazon Security?

At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon's products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores.

Inclusive Team Culture

In Amazon Security, it's in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices.

Training & Career Growth

We're continuously raising our performance bar as we strive to become Earth's Best Employer. That's why you'll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.

Work/Life Balance

We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there's nothing we can’t achieve.

Basic Qualifications:

• 4+ years of information security and compliance experience
• Bachelor's degree or equivalent
• Knowledge of AWS or cloud technologies
• Experience prioritizing and handling multiple assignments at any given time while maintaining commitment to deadlines, or experience in a fast-paced, high-tech company
• US government security clearance of top secret or above

Preferred Qualifications:

• CISSP, CISA, CISM or other security certification
• Experience in working directly with government officials and regulatory bodies
• Familiarity with satellite communications, telecommunications, or aerospace security environments
• Experience authoring or contributing to security assessment packages, POA&Ms, or authorization documentation

Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.

Our inclusive culture empowers Amazonians to deliver the best results for our customers.

If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you're applying in isn't listed, please contact your Recruiting Partner.

The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits.

USA, VA, Arlington - 102,000.00 - 178,400.00 USD annually