Security Assurance Specialist , AWS Compliance & Security Assurance
About the role
As part of the Amazon Web Services (AWS) Security team, you will work on far‑reaching projects that drive continuous improvement across AWS at unparalleled scale. You will operate in a constantly changing environment, partnering with AWS business and engineering teams on security‑critical projects and programs, designing and delivering tooling and automation, and raising the bar on security. The team also enables customers in regulated markets such as healthcare, finance, and government.
Responsibilities
- Develop a deep understanding of the operational services, processes, and controls that support AWS’s security posture.
- Understand AWS’s internal security control framework and its relationship to compliance assessment processes.
- Assess the risk profile of emerging AI platforms and integrate those risks into assessment processes.
- Perform service, feature, and related assessments for customer and audit requirements.
- Collaborate with service, infrastructure, and administrative teams to design and deliver tooling that improves AWS’s security posture.
- Identify process‑improvement opportunities and high‑risk areas.
- Work with service owners to develop innovative solutions to complex technical challenges.
- Manage the build and deployment of new tooling to streamline and automate security‑related initiatives.
- Support process‑improvement and security‑related projects in coordination with service teams.
- Manage communications to service teams and stakeholders.
- Dive deep into the AWS control environment to develop technical understanding of control implementation and articulate compliance implications to internal and external audit functions.
- Set strategic direction, improve documentation, track progress, coordinate improvement efforts, and monitor process‑improvement effectiveness.
- Develop broad domain and technical knowledge in AWS security solutions and the operational processes that support AWS compliance programs.
- Act as a trusted advisor, facilitator, and creative problem‑solver to continuously improve the organization.
- Develop and share program/project process frameworks, tools, and best practices for organization‑wide adoption.
- Liaise with auditors, articulate control implementation and impact, and apply security, privacy, and compliance concepts to a technical cloud environment.
- Effectively communicate compliance program results—including assessment status, workflow, remediation, and reporting—to peers and senior leaders.
Qualifications
Basic qualifications
- Bachelor’s degree in Computer Science, Information Systems Management, Mathematics, Accounting/Auditing, or a related field, or equivalent practical experience.
- 5+ years of experience in security, audits, customer trust, control assessments, or risk assessments.
- 3+ years of experience assessing complex technical processes.
Preferred qualifications
- Experience with audit or risk program design, control‑environment process documentation, and control mapping.
- Experience with monitoring and automating security controls.
- Experience in third‑party and/or internal audit examinations.
- Demonstrated high judgment and risk‑decision‑making abilities.
- Experience performing technical assessments and documenting network, operating‑system, and application security, as well as auditing IT processes with knowledge of key controls across industry best practices.
- Experience understanding the risk profile of emerging AI technologies.
About the team
Amazon Security values diverse experiences and encourages candidates from non‑traditional backgrounds to apply. The organization is responsible for maintaining a high security bar across all Amazon products and services, offering opportunities to work in cloud, devices, retail, entertainment, healthcare, operations, and physical stores. The culture emphasizes continuous learning, DEI events, and a collaborative environment where diverse ideas are celebrated.
Benefits
- Comprehensive health insurance (medical, dental, vision, prescription)
- Basic Life & AD&D insurance with optional supplemental life plans
- Employee Assistance Program (EAP) and mental‑health support
- Medical Advice Line
- Flexible Spending Accounts
- Adoption and surrogacy reimbursement coverage
- 401(k) matching
- Paid time off and parental leave
Pay
Base salary range: $102,000 – $178,400 USD annually (locations: Arlington, VA; Herndon, VA; Seattle, WA). Total compensation includes sign‑on payments and restricted stock units (RSUs). Final compensation is determined based on experience, qualifications, and location.