Security Controls Specialist II - Compliance & Assurance

Amazon.com Inc.; Herndon (VA); On-site; USD 102,000 - 178,000; Full time

Job summary

Amazon Web Services, Inc. in the United States—Herndon, VA is seeking a technically deep security controls specialist to steward a portfolio of technical security and compliance control areas, working with engineering and service teams to define and evidence controls.

You will translate requirements into actionable controls and map them to the internal AWS framework. The role requires hands-on understanding of build pipelines, code review, security testing and resilience practices, with a focus

Qualifications

• 5+ years in security, audits, customer trust, control assessments, or risk assessments.
• 3+ years assessing complex technical processes.
• Bachelor’s Degree in Computer Science, Information Systems Management, Mathematics, Accounting/Auditing, or related field or equivalent practical experience.

Responsibilities

• Partner with control owners and engineering teams to clearly document how their controls are designed, implemented and evidenced, so internal stakeholders and audit-facing teams understand what each control does and how well it works.
• Assess the overall shape of your control areas: find gaps, overlaps and conflicts, and make sure controls work together and give appropriate coverage.
• Dive deep into the technical mechanisms behind each control, such as build and deployment pipelines, code review, security testing and resilience mechanisms, to confirm that control descriptions reflect how systems actually work.
• Translate security, regulatory and framework requirements into actionable, testable technical controls in partnership with service teams.
• Build a deep understanding of how AWS services are developed, deployed and operated, and how those practices map to our internal control framework and assessment processes.
• Evaluate the risk profile of emerging AI platforms and capabilities, including AI-assisted development, and reflect those risks in control design and assessment processes.
• Support service, feature and control assessments for customer, regulatory and audit requirements, and give audit-facing teams the technical context they need on control design and intent.
• Identify high-risk areas and work with control owners and service teams to drive remediation and process improvement.
• Help design and deliver tooling and automation that simplifies control documentation, evidence collection and compliance reporting.
• Communicate program status, risks and outcomes to engineering teams and leadership.

Skills

Security assessments

Technical process assessment

Audit program design

Control mapping

Security controls automation

Audit experience

AI risk awareness

Education

Bachelor’s Degree in Computer Science, Information Systems Management, Mathematics, Accounting/Auditing, or related field

Job description

Amazon Web Services, Inc. in the United States—Herndon, VA is seeking a technically deep security controls specialist to steward a portfolio of technical security and compliance control areas, working with engineering and service teams to define and evidence controls.

You will translate requirements into actionable controls and map them to the internal AWS framework. The role requires hands-on understanding of build pipelines, code review, security testing and resilience practices, with a focus