Security Assurance Specialist , AWS Compliance & Security Assurance

Amazon • Herndon, VA

1d

About The Position

At AWS, Security is priority zero. As part of the Amazon Web Services (AWS)
Security team, we are looking for a technically deep Industry Specialist who is
passionate about owning far-reaching projects to drive continuous improvement
across AWS at unparalleled scale. As a part of AWS Compliance and Security
Assurance you’ll have an opportunity to operate in a constantly changing
environment, working with AWS business and engineering teams on
business-critical, security projects and programs. We work across AWS to drive
strategic security initiatives, design and deliver tooling and automation, and
continue to raise the bar on security at AWS. Our team also drives programs to
enable customers that operate in regulated markets, such as Healthcare, Finance,
Government, etc.

A day in the life
· Dive deep into the AWS control environment to develop technical understanding
of control implementation, and articulate compliance implications to internal
and external audit functions.
· Set strategic direction, improve documentation, track progress, coordinate
improvement efforts, and monitor process improvement effectiveness.
· Develop broad domain and technical knowledge in AWS security solutions
including the operational processes and controls in place that support AWS
compliance programs.
· Monitor, evaluate, and continuously improve the organization by being a
trusted advisor, facilitator and creative problem solver.
· Develop and share program/project process frameworks, tools, and best
practices that can be adopted throughout the organization.
· Liaise with auditors, articulate control implementation and impact, and
establish considerations for applying security, privacy and compliance concepts
to a technical cloud environment.
· Effectively communicate compliance program results, including assessment
status, workflow, remediation, and reporting, to a broad audience including
peers and senior leaders.

About the team
Diverse Experiences
Amazon Security values diverse experiences. Even if you do not meet all of the
qualifications and skills listed in the job description, we encourage candidates
to apply. If your career is just starting, hasn’t followed a traditional path,
or includes alternative experiences, don’t let it stop you from applying.

Why Amazon Security?
At Amazon, security is central to maintaining customer trust and delivering
delightful customer experiences. Our organization is responsible for creating
and maintaining a high bar for security across all of Amazon’s products and
services. We offer talented security professionals the chance to accelerate
their careers with opportunities to build experience in a wide variety of areas
including cloud, devices, retail, entertainment, healthcare, operations, and
physical stores.

Inclusive Team Culture
In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI
events and learning experiences inspire us to continue learning and to embrace
our uniqueness. Addressing the toughest security challenges requires that we
seek out and celebrate a diversity of ideas, perspectives, and voices.

Training & Career Growth
We’re continuously raising our performance bar as we strive to become Earth’s
Best Employer. That’s why you’ll find endless knowledge-sharing, training, and
other career-advancing resources here to help you develop into a better-rounded
professional.

Work/Life Balance
We value work-life harmony. Achieving success at work should never come at the
expense of sacrifices at home, which is why flexible work hours and arrangements
are part of our culture. When we feel supported in the workplace and at home,
there’s nothing we can’t achieve.

Requirements

• Bachelor’s Degree in Computer Science, Information Systems Management, Mathematics, Accounting/Auditing, or other related fields or equivalent practical experience.
• 5+ years of experience in security, audits, customer trust, control assessments, or risk assessments.
• 3+ years of experience assessing complex technical processes

Nice To Haves

• Experience with audit or risk program design, control environment process documentation, and control mapping
• Experience with monitoring and automating security controls.
• Experience in third-party and/or internal audit examinations.
• Demonstrates high judgement and risk decision making abilities.
• Have experience in performing technical assessments and documentation of network, operating systems, application security, as well as auditing IT processes, including working knowledge of key controls across a number of industry best practices
• Experience understanding the risk profile of emerging AI technologies

Responsibilities

• Develop a deep understanding of the operational services, processes, and controls in place that support AWS's security posture.
• Understand our internal security control framework and how it relates to our compliance assessment processes.
• Understand the risk profile of emerging AI platforms and integrate them into our assessment process.
• Perform service, feature, and other related assessment work for customer and audit requirements.
• Work with service, infrastructure and administrative teams to develop and deliver tooling that improves AWS's security posture.
• Identify process improvement opportunities and high-risk areas.
• Work with service owners to develop innovative solutions to complex technical challenges.
• Manage the build and deployment of new tooling to streamline and automate security-related initiatives.
• Support process improvement and security-related projects in coordination with service teams.
• Manage communications to service teams and stakeholders.

Benefits

• health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage)
• 401(k) matching
• paid time off
• parental leave

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level