Security Compliance Specialist, Leo Security Assurance

Security Compliance Specialist, Amazon Leo Security Assurance

Job :  |  Services LLC

Locations:
Arlington, VA, USA;
Redmond, WA, USA.

Amazon Leo (previously Project Kuiper) is an initiative to increase global broadband access through a constellation of over 3,000 Low Earth Orbit satellites, aiming to bring fast, affordable broadband to unserved and underserved communities worldwide.

We are seeking an individual contributor who is creative and passionate about delivering Governance, Risk, and Compliance solutions to meet Leo’s regulatory and external assurance needs. In this role, you will work with various business and security teams across Amazon to identify compliance needs, assess process maturity, design and build high‑impact security or compliance programs, and liaise with external auditors and regulators.

Export Control Requirement: Candidates must be a U.S. citizen or national, U.S. permanent resident, or lawfully admitted refugee/asylee.

• Design and drive scalable processes within a GRC framework to ensure compliance with Leo’s regulatory and contractual security and privacy requirements.
• Build and maintain compliance certifications (ISO 27001, ISO 22301, NIST 800‑53, ISO 27701, SOC 2, GDPR, CCPA, etc.), identify applicable security controls, assess compliance gaps, develop remediation strategies, and drive remediation activities to completion.
• Drive certifications and assurance programs by liaising with external auditors and other Amazon security teams, articulating control implementation and impact, and applying security and risk concepts to a highly technical environment.
• Communicate to key stakeholders and leadership on controls implementation, audit results, compliance program metrics, key risks, and areas for improvement.
• Work closely with engineering, compliance, security, bizdev, and Legal teams to identify future compliance and regulatory requirements and define compliance solutions.
• Serve as an advisor on audit remediation issues.
• Translate cross‑functional GRC requirements into the GRC tool.
• Implement hands‑on day‑to‑day problem solving and quick action plans to meet short‑ and long‑term priorities.

Work in a start‑up‑like environment backed by Amazon’s infrastructure, bootstrap security mechanisms, and help instill a security culture across the organization. Own end‑to‑end security of product and operations, drive compliance program implementation, and collaborate with external auditors and regulators.

• 3+ years of experience with GRC technology (SAP GRC Access Controls, Process Controls, Risk Management), SAP Identity Management for IAM (Single Sign‑On, user lifecycle management).

• Experience with compliance and security standards including PCI DSS, ISO 27001, HIPAA, and NIST.

Competitive salary range: $102,000 – $178,400 annually in Redmond, WA. Compensation includes sign‑on payments, RSU, health insurance, 401(k) matching, paid time off, parental leave, and more.

Amazon is an equal‑opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.