Security Industry Spclst II - AMZ26369.3

Amazon Inc.; Seattle (WA); On-site; USD 129,000 - 178,000; Full time

Job summary

Amazon.com Services LLC in Seattle, WA is seeking a Security Industry Specialist II to support compliance programs and audit readiness in a cloud security environment. This role develops knowledge of AWS security solutions, coordinates remediation, and drives improvements across service teams.

Qualified candidates have a Bachelor’s or Master’s in a related field with several years of experience in security compliance, risk management, and collaboration with engineering teams.

Qualifications

• Bachelor’s Degree or foreign equivalent in Computer Science, Engineering, Management or related field plus 5 years of progressively responsible post-baccalaureate experience in security compliance or risk management.
• Alternative: Master’s Degree or foreign equivalent in related field with 3 years of experience in security compliance, risk management, or related.

Responsibilities

• Dive deep into the control environment to understand control implementation and audit implications.
• Improve documentation, coordinate improvements, and monitor process effectiveness.
• Manage changes to the control environment and external standards; document activities and readiness for audit.
• Develop domain and technical knowledge in AWS and Amazon security solutions supporting compliance programs.
• Communicate remediation plans and drive continuous improvements within the security organization and project teams.

Skills

Security compliance

Risk management

Cross-functional collaboration

Audit readiness

Cloud security

Security engineering

Education

Bachelor’s degree or foreign equivalent

Master’s degree or foreign equivalent

Job description

Description

Employer: Amazon.com Services LLC

Position: Security Industry Spclst II - AMZ26369.3

Location: Seattle, WA

Multiple Positions Available:

• Dive deep into the control environment to develop a technical understanding of control implementation and articulate compliance implications to internal and external audit functions
• Improve documentation, coordinate improvement efforts, and monitor process improvement effectiveness
• Operate and plug into organizational mechanisms for managing changes to the control environment and external industry standards requirements; document organizational control activities and confirm readiness of controls for audit
• Develop broad domain and technical knowledge in AWS and Amazon corporate security solutions that support compliance programs
• Communicate and drive remediation and continuous improvements to the security organization, the program management process and control implementation projects in coordination with the service teams. This includes resolution of audit findings and the execution of projects originated from internal assessments
• Collect evidence in support of audit engagements and the relationship with the ISO/SOC2 auditors and Amazon service teams, articulate control implementation and impact, and establish considerations for applying security, privacy, and compliance concepts to a technical cloud environment
• Apply a working knowledge of commercial information security and privacy regulation and policy to articulate customer and control impact and drive alignment to controls

(40 hours / week, 8:00am-5:00pm, Salary Range $128898 - $178400)

Amazon.com is an Equal Opportunity – Affimative Action Employer – Minority / Female / Disability / Veteran / Gender Identity / Sexual Orientation

Basic Qualifications

Bachelor’s Degree or foreign equivalent degree in Computer Science, Engineering, Management or a related field followed by 5 years of progressively responsible post-baccalaureate

experience in the job offered or a related occupation in security compliance, risk management or a related. In the alternative, employer will accept a Master’s Degree or foreign equivalent

degree in Computer Science, Engineering, Management or a related field and 3 years of experience in the job offered or a related occupation in security compliance, risk management or

related.

Experience must include:

1) 3 years of experience in a security compliance or risk management role and/or working with legal and compliance teams

2) 3 years of experience working directly with engineering teams and other security stakeholders

3) 3 years of experience managing compliance technology projects across teams, and building sustainable processes

4) 3 years of experience in risk management, business risk analysis, and making complex business/risk trade-off recommendations and decisions

5) 3 years of experience with security domain areas such as security engineering; application, system and network security; access management; cryptography; data retention and

anonymization; security risk assessment; and current security threats, trends, and mitigations

6) 3 years of experience with risk-based analysis of products, vendors, compliance requirements, and significant operational change

The pay range for this position in Seattle, WA is $128898 - $178400 (yr); however, base pay offered may vary depending on job-related knowledge, skills, and experience. A sign-on bonus and restricted stock units may be provided as part of the compensation package, in addition to a full range of medical, financial, and/or other benefits, dependent on the position offered. This information is provided by Washington Equal Pay Act. Base pay information is based on market location.

Preferred Qualifications

All applicants must meet all the above listed requirements.

Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.