Senior IT Auditor, AWS, Internal Audit

Amazon • Seattle, WA

1d • Onsite

About The Position

At Amazon, we're working to be the most customer-centric company on earth, and that includes protecting our customers and their data. To get there, we need exceptionally talented, bright, and driven people. Do you have a passion for architecture, security, software design and innovative technologies? Do you see security, compliance and risk management as business enablers?

Amazon’s Internal Audit team is seeking a technology auditor to perform assessments of Amazon Web Services (AWS). You will have the rare opportunity to dive deep into the internal architecture of AWS infrastructure and services to assess operational risks and security posture.

This position will challenge your current understanding of AWS services. You will have a broad technical background and the ability to learn new technology concepts quickly. You are someone who is curious and known for diving deep into subject matter, taking ownership, and encouraging innovative and pragmatic solutions to complex problems. In addition, you will have solid business judgment, enthusiasm for risk management, the ability to gain trust and respect of business leaders, and the capability to guide a fast-paced organization to the right results.

Up to 10% travel may be required, including international travel.

Requirements

• 4+ years of compliance program management, legal, governance, audit, risk/loss prevention, or equivalent experience
• Bachelor's degree or equivalent
• Experience handling confidential information
• Bachelor's degree in Computer Science, Computer Engineering, Information Management, Information Systems, or other related discipline
• 2+ years of systems design, software development, operations, automation, and process improvement experience

Nice To Haves

• 3+ years of program requirements definition and data and metrics leveraging to drive improvements experience
• Professional auditing qualification, or similar risk or compliance credentials
• Experience with SQL and Excel
• Experience in any combination of the following: application security frameworks, security code reviews, incident response, secure infrastructure, penetration testing, mobile security, cloud security, AI security, identity and access controls, threat modeling, cryptography, threat intelligence, or secure software development
• Knowledge of one or more of the following domains: access-control system and methodology, network security, application- and system-development security, security architecture and models, cryptography, and operations security
• Experience in accounting management in Big Four with Fortune 500 clients, or experience designing and implementing controls or experience performing audits over financial reporting environment
• CISSP, CISA, CISM or other security certification
• Experience that includes strong analytical skills, attention to detail, and effective communication abilities, or experience with programming/scripting (Batch, VB, PowerShell, Java, C#, Chef, Perl, Ruby and/or PHP) and experience in SQL Server/MySQL
• Experience with IT compliance and risk management requirements (e.g. security, privacy, SOX, HIPAA etc.)

Responsibilities

• The ideal candidate is an experienced technology or security professional who can dive deep into a variety of complex architectures, identify risks and ensure AWS services are designed and operating securely.
• You will support the planning, scoping, execution, and reporting based on identified risks. Assessment scope may include identity and access management, key management, data security/privacy, service monitoring, release management, and service availability.
• You will bring independent and objective points of view to provide support to service teams and their partners to identify opportunities for control improvements to mitigate risks, ensure compliance and improve operational performance. In this capacity, you will gain valuable exposure to many areas of our global business.

Benefits

• health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage)
• 401(k) matching
• paid time off
• parental leave
• sign-on payments
• restricted stock units (RSUs)

What This Job Offers

• Job Type: Full-time
• Career Level: Senior