Senior Security Compliance Specialist, Amazon Leo Security Assurance

Are you passionate about protecting critical infrastructure and ensuring security compliance at scale? Amazon Leo (previously known as Project Kuiper) is an initiative to increase global broadband access through a constellation of over 3,000 Low Earth Orbit (LEO) satellites, bringing fast, affordable broadband to unserved and underserved communities worldwide.

We are looking for a creative and collaborative security compliance professional to help deliver governance, risk, and compliance solutions that meet regulatory and external assurance needs. In this role, you will work across business and security teams at Amazon to identify compliance needs, assess the maturity of processes and controls, design and execute high-impact security compliance programs, and coordinate with external auditors and regulators.

Export Control Requirement:
Due to applicable export control laws and regulations, candidates must be a U.S. citizen or national, U.S. permanent resident (i.e., current Green Card holder), or lawfully admitted into the U.S. as a refugee or granted asylum.

Security Clearance Requirement:
This position requires that the candidate selected be a U.S. citizen and must currently possess and maintain an active Top Secret security clearance.

• Independently interpret and apply NIST SP 800-53, Intelligence Community Directives (ICD), Committee on National Security Systems Instructions (CNSSI), and other government compliance requirements to ALG products and services, determining applicability across authorization boundaries and advising product teams on compliance implications during design and development phases
• Own the end-to-end security control mapping process across applicable frameworks, defining control intent, evidence expectations, and inherited control dependencies while identifying gaps in control coverage and driving resolution with responsible teams
• Author and validate security control narratives and compliance documentation for government authorization packages (SSPs, SCTMs), establishing quality standards and repeatable documentation practices that scale across multiple concurrent authorization efforts
• Define evidence requirements across the operational environment, coordinating collection from functional teams, evaluating sufficiency against assessment objectives, and building sustainable evidence pipelines that reduce recurring collection burden on builder teams
• Lead assessment readiness activities including package preparation, readiness declarations, and direct engagement with assessors, serving as the primary compliance point of contact during security assessments and independently fielding technical inquiries
• Author Plans of Action and Milestones (POA&Ms) for identified findings, establish remediation timelines with control owners, track closure activities, and elevate at-risk items to leadership with recommended courses of action
• Communicate assessment results, compliance posture, key risks, and program improvement areas to stakeholders and leadership, framing findings in business context and providing actionable recommendations that inform program-level decisions
• Own the response lifecycle for government security inquiries and customer compliance requests, coordinating across internal teams to deliver accurate, timely responses and identifying patterns that inform proactive compliance improvements
• Develop and maintain deep technical understanding of the control environment across operational domains, translating complex control activities into clear compliance narratives for assessors, stakeholders, and engineering teams with varying levels of compliance familiarity
• Operate and continuously improve a quality rhythm of the business for managing multiple…