Senior Security Compliance Lead, Devices & Services

Amazon Inc.; Seattle (WA); On-site; USD 119,000 - 209,000; Full time

Job summary

Amazon.com Services LLC is seeking a Senior Security Compliance Specialist to design scalable GRC frameworks for devices, across markets, translating regulations into control designs aligned with ISO 27001 and similar standards.

You will collaborate with security, engineering, legal, and business teams to drive remediation, assess risks, and engage with regulators to shape evolving requirements. This role emphasizes AI-first approaches to compliance processes and ongoing security excellence.

Qualifications

• Bachelor's degree or equivalent in Information Security, Risk Management, or a related field.
• 7+ years of security, compliance and risk management experience.
• Knowledge of access-control, network security, application security, security architecture, cryptography, and operations security.
• Experience with ISO 27001/27002, HIPAA, NIST CSF.

Responsibilities

• Design and drive scalable GRC frameworks for Amazon devices across markets.
• Assess and mitigate security compliance risks with remediation plans for leadership.
• Translate evolving regulations into control designs and audit-aligned programs.
• Represent Amazon with regulators and industry groups to anticipate requirements.
• Create repeatable processes for control design, testing, and validation.

Skills

Security frameworks

ISO 27001

NIST CSF

Risk management

Regulatory compliance

Education

Bachelor's degree in Information Security

Tools

AWS tech stack

Auditing tools

Job description

Amazon.com Services LLC is seeking a Senior Security Compliance Specialist to design scalable GRC frameworks for devices, across markets, translating regulations into control designs aligned with ISO 27001 and similar standards.

You will collaborate with security, engineering, legal, and business teams to drive remediation, assess risks, and engage with regulators to shape evolving requirements. This role emphasizes AI-first approaches to compliance processes and ongoing security excellence.