Sr. Industry Specialist, AFSS Compliance
About the role
This role sits at the intersection of compliance, security engineering, and AI-driven automation. You will serve as a subject matter expert for compliance programs supporting Amazon Foundational Security Services (AFSS), working closely with engineering teams and external auditors to ensure our services meet the highest bar for security assurance.
Responsibilities
Own and coordinate audit programs (SOX, FedRAMP, ISO, and US government regulatory frameworks) for Amazon Foundational Security Services
Serve as the compliance subject matter expert for foundational security services, partnering with service teams to ensure audit readiness
Develop and maintain customer-facing compliance documentation that clearly communicates the security posture of AFSS services
Identify manual compliance workflows and design AI-powered automation solutions to eliminate toil and improve accuracy
Build and deploy AI agents and LLM-based tooling to streamline evidence collection, control testing, and audit response
Support FedRAMP authorization and continuous monitoring for foundational security services in government cloud regions, including air-gapped (isolated) environments
Navigate the unique compliance requirements of air-gapped clouds, including evidence collection, control implementation, and audit coordination without connectivity to commercial regions
Lead the automation of compliance testing and documentation in partnership with Security Assurance, modernizing how compliance artifacts are created, maintained, and managed at scale
Engage with internal stakeholders (engineering, legal, product) and external auditors to support certification and attestation efforts
Stay current on evolving compliance requirements, US government regulations, and industry best practices
Dive deep into security technologies including access control, identity, authorization, authentication, and lifecycle management
Qualifications
5+ years of SOX and/or Audit engagements experience
Knowledge of security technology and concepts (Authentication, Authorization, Single sign-on, Cryptography, etc.)
Experience with automating and simplifying team development, test, and operations processes
Experience in regulatory compliance management with government agencies
Background in security engineering or security services
Bachelor's degree or equivalent in Information Security, Computer Science, Risk Management, Engineering, Math, Statistics, or a related discipline, or equivalent technology experience
Experience with Machine Learning and Large Language Model fundamentals, including architecture, training/inference lifecycles, and optimization of model execution, or experience building complex software systems that have been successfully delivered to customers
Experience architecting, securing, and operating Amazon Web Services
Hands-on experience automating compliance workflows using AI tooling (e.g., building AI agents, prompt engineering, RAG pipelines)