Risk Specialist, AWS Compliance & Security Assurance

Job Overview

At Amazon Web Services (AWS), Security is our highest priority. The AWS Security Assurance team is responsible for demonstrating the security controls of services offered by AWS. At our scale, we invent new ways to provide the highest level of assurance to security-conscious customers.

Our team works closely with customers across industries, along with their auditors and regulatory agencies, to understand the security shift from on-premises to the cloud, security of the cloud, and customer capabilities in the cloud. Security Assurance specialists ensure AWS can meet customer audit, assurance, and regulatory expectations.

We are looking for detail-oriented and passionate audit specialists to join our growing team. In this role, you will develop foundational expertise in cloud security assurance, support audit evidence collection, and contribute to defined audit programs across Asia-Pacific.

You should have a strong interest in geopolitics, developing audit skills, developing regulatory analysis skills, and learning about technology. We expect team members and management to take a high degree of ownership for their program, vision, and execution. You will work directly with multiple AWS divisions as we build the tools and evidence needed to demonstrate assurance for our customers, helping bridge security, technology, and compliance across AWS in Asia Pacific.

You are someone who can prioritize well, communicate early and clearly, and demonstrate a track record of delivering outcomes both personally and through your peers.

Key Job Responsibilities

• Collect, organize, and deliver audit evidence for defined assurance programs focused on Asia-Pacific geographies, under the guidance of senior team members.
• Support the development and maintenance of mappings between AWS controls and audit evidence, contributing to evidence collection automation initiatives led by the team.
• Develop a working knowledge of the Amazon control environment, including security activities and control implementations, and apply this understanding to assigned audit and evidence collection activities.
• Build foundational understanding of regulated industry compliance requirements relevant to assigned programs, and support communication of how AWS control activities address specific regulatory obligations.
• Develop and maintain standard operating procedures (SOPs), workflows, and documentation related to audit evidence collection and compliance activities.
• Track and manage project milestones, identify blockers, and escalate issues appropriately to ensure timely delivery of audit and compliance activities.
• Apply risk management best practices and methodologies to assigned compliance and audit activities, understanding risk thresholds and taking appropriate actions when thresholds are exceeded.
• Produce clear and concise written documentation, including audit results, status reports, and escalation summaries, for review by team leads and managers.
• Promote a culture of compliance by staying current on relevant regulations and best practices applicable to assigned audit programs.

About the Team

Diverse Experiences

AWS Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed, you are encouraged to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.

Work/Life Balance

We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture.

Inclusive Team Culture

In AWS Security, we learn and stay curious. Ongoing DEI events and learning experiences inspire continued learning and help us embrace our uniqueness. Addressing the toughest security challenges requires seeking out and celebrating a diversity of ideas, perspectives, and voices.

Mentorship and Career Growth

We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. You’ll find knowledge-sharing, training, and other career-advancing resources to help you develop into a better-rounded professional.

Basic Qualifications

• Experience with MS Office, MS Excel, and data retrieval languages.
• Experience with English-language communication skills, both written and verbal.
• Bachelor’s degree or 3 years of industry experience in data collection and data entry.

Preferred Qualifications

• Experience working with, or having knowledge of, cloud computing and existing cloud technologies.
• Experience in handling internal and external audits.

Additional Information

If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, contact your Recruiting Partner.