AWS Security Risk Specialist, AWS Compliance & Security Assurance

Overview

AWS Security Risk Specialist, AWS Compliance & Security Assurance. Job :  | Amazon Web Services, Inc.

At Amazon Web Services (AWS), Security is our highest priority. The AWS Security Assurance team is responsible for demonstrating the security controls of services offered by AWS. We are looking for a highly motivated risk specialist with either IT audit and/or risk assessment experience to join our team. You will conduct risk assessments across our security controls product to ensure readiness of new tools with external compliance obligations.

You will understand the key objectives and goals of customers, regulators, and third-party audit frameworks and understand AWS controls that address these goals. You will assess AWS operational processes around controls and document risk governance processes.

The successful candidate loves learning about AWS internal security controls framework, new AWS services, and collaborating across many stakeholders and compliance frameworks. Our team culture encourages ownership, diversity, inclusion, and innovation. You will work directly with divisions within AWS service to improve AWS’ ability to demonstrate assurances for our internal and external customers while reducing risk. This role facilitates open and transparent relationships with AWS internal stakeholders and customers.

You should be able to understand core security design principles, learn about new AWS services and their IT processes, and document risk management and governance processes related to these assessments.

This position can work out of our AWS offices in Arlington, VA;
Herndon, VA;
Seattle, WA; or New York, NY.

• Understand risk management and governance processes quickly and efficiently.
• Write, articulate, and develop security risk documentation.
• Review evidence needed to illustrate the key controls that exist across the AWS environment.
• Communicate operational processes around AWS security practices and how controls are implemented across the environment to key stakeholders.
• Communicate to leadership key risks and areas for program improvement, and coordinate diverse opinions and improvement efforts.
• Collaborate with internal stakeholders across security, risk, and compliance functions to address requests.
• Dive deep into the AWS control environment to develop broad domain and technical understanding of AWS control activities and implementation.
• Bridge communication with key stakeholders and AWS technical communities to articulate control implementation.

Diverse Experiences:
Amazon Security values diverse experiences. If you do not meet all of the qualifications, we encourage you to apply. If your career is just starting or includes alternative experiences, don’t let it stop you from applying.

Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. We offer opportunities to build experience across cloud, devices, retail, entertainment, healthcare, operations, and physical stores.

Inclusive Team Culture:
We learn, stay curious, and celebrate diversity of ideas, perspectives, and voices. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness.

Training & Career Growth:
We continuously raise our performance bar with knowledge-sharing, training, and other resources to help you develop into a well-rounded professional.

Work/Life Balance:
We value work-life harmony with flexible work hours and arrangements.

• Bachelor's degree in Computer Science, Information Systems, Finance, Accounting, or a related field
• 2+ years of security-related professional experience
• 2+ years of process improvement procedures experience

• 3+ years of regulatory and risk management experience
• Experience in auditing, risk management, compliance, program management, or quality management systems
• Experience reading and writing procedures, technical documents, and engineering drawings

Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected…