Senior Security Compliance Specialist, Amazon Leo Security Assurance

Senior Security Compliance Specialist, Amazon Leo Security Assurance

Are you passionate about protecting critical infrastructure and ensuring security compliance at scale? Amazon Leo (previously know as Project Kuiper) is an initiative to increase global broadband access through a constellation of over 3,000 Low Earth Orbit (LEO) satellites, bringing fast, affordable broadband to unserved and underserved communities worldwide.

Due to applicable export control laws and regulations, candidates must be a U.S. citizen or national, U.S. permanent resident (i.e., current Green Card holder), or lawfully admitted into the U.S. as a refugee or granted asylum.

This position requires that the candidate selected be a U.S. citizen and must currently possess and maintain an active Top Secret security clearance.

• Independently interpret and apply NIST SP 800-53, Intelligence Community Directives (ICD), Committee on National Security Systems Instructions (CNSSI), and other government compliance requirements to ALG products and services, determining applicability across authorization boundaries and advising product teams on compliance implications during design and development phases
• Own the end-to-end security control mapping process across applicable frameworks, defining control intent, evidence expectations, and inherited control dependencies while identifying gaps in control coverage and driving resolution with responsible teams
• Author and validate security control narratives and compliance documentation for government authorization packages (SSPs, SCTMs), establishing quality standards and repeatable documentation practices that scale across multiple concurrent authorization efforts
• Define evidence requirements across the operational environment, coordinating collection from functional teams, evaluating sufficiency against assessment objectives, and building sustainable evidence pipelines that reduce recurring collection burden on builder teams
• Lead assessment readiness activities including package preparation, readiness declarations, and direct engagement with assessors, serving as the primary compliance point of contact during security assessments and independently fielding technical inquiries
• Author Plans of Action and Milestones (POA&Ms) for identified findings, establish remediation timelines with control owners, track closure activities, and escalation at-risk items to leadership with recommended courses of action
• Communicate assessment results, compliance posture, key risks, and program improvement areas to stakeholders and leadership, framing findings in business context and providing actionable recommendations that inform program-level decisions
• Own the response lifecycle for government security inquiries and customer compliance requests, coordinating across internal teams to deliver accurate, timely responses and identifying patterns that inform proactive compliance improvements
• Develop and maintain deep technical understanding of the control environment across operational domains, translating complex control activities into clear compliance narratives for assessors, stakeholders, and engineering teams with varying levels of compliance familiarity
• Operate and continuously improve a quality rhythm of the business for managing multiple stakeholder expectations, authorization timelines, and compliance domains simultaneously, identifying process bottlenecks and implementing mechanisms that increase throughput and predictability

Your primary focus is ensuring that satellite broadband products and services meet rigorous government security and compliance standards. You will split your time between independent analysis of the control environment — reviewing evidence, drafting authorization documentation, and evaluating framework applicability — and collaborative sessions with engineering, operations, and security partner teams to align on control implementation and remediation priorities. Regular cadences include assessment readiness reviews, stakeholder syncs, and compliance status updates that keep programs on track across multiple authorization timelines.

Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes…