Security Risk & Compliance Lead, Cloud Services

Amazon Web Services (AWS); Arlington (VA); On-site; USD 83,000 - 146,000; Full time

Job summary

Amazon Web Services, Inc. is seeking an experienced Security Risk Specialist to own risk assessments of AWS services and security controls, translating regulatory and customer needs into clear control expectations.

The role involves working across multiple AWS service teams to improve risk assessment processes, document controls, and present findings to leadership. Ideal candidates bring extensive IT audit and risk experience and a passion for cloud security.

Qualifications

• 3+ years of auditing business processes, risk mitigation or internal audits experience.
• 5+ years of work in relevant industries such as law, customer service, investigations, risk, compliance or project management experience.
• 5+ years of customer service experience.
• Bachelor's degree or equivalent.

Responsibilities

• Own end-to-end risk assessments for AWS services and security controls: scoping, evidence review, risk determination and final documentation, with minimal oversight.
• Assess complex technical and operational processes across multiple AWS services, then find control gaps and practical ways to fix them.
• Write and maintain high-quality security risk documentation, governance processes and assessment procedures, and set the documentation standard for the team.
• Review and challenge evidence to confirm that key controls exist and work as intended across the AWS environment.
• Turn customer, regulatory and third‑party framework requirements into clear control expectations for service teams.
• Present key risks, trends and program improvements to leadership with data‑driven recommendations, and push improvement efforts through to completion.
• Act as a trusted advisor to service teams and AWS technical communities, explaining how controls are implemented and helping teams prepare for assessments.
• Find recurring problems in the assessment process and lead improvements that make it more consistent, scalable and efficient.
• Handle escalations and complex requests together with stakeholders across AWS security, risk and compliance.

Skills

Auditing processes

Risk mitigation

Internal audits

Customer service

Microsoft Office

Data & metrics

Education

CAMS/CRCM/CRP certification

Bachelor's degree or equivalent

Tools

Microsoft Office

Job description

Amazon Web Services, Inc. is seeking an experienced Security Risk Specialist to own risk assessments of AWS services and security controls, translating regulatory and customer needs into clear control expectations.

The role involves working across multiple AWS service teams to improve risk assessment processes, document controls, and present findings to leadership. Ideal candidates bring extensive IT audit and risk experience and a passion for cloud security.