Security Industry Spclst II - AMZ26369.3

Saved job description

Employer: Amazon.com Services LLC

Position: Security Industry Spclst II - AMZ26369.3

Location: Seattle, WA

Multiple Positions Available:

1. Dive deep into the control environment to develop a technical

understanding of control implementation and articulate

compliance implications to internal and external audit functions

2. Improve documentation, coordinate improvement efforts, and

monitor process improvement effectiveness

3. Operate and plug into organizational mechanisms for managing

changes to the control environment and external industry

standards requirements; document organizational control

activities and confirm readiness of controls for audit

4. Develop broad domain and technical knowledge in AWS and

Amazon corporate security solutions that support compliance

programs

5. Communicate and drive remediation and continuous

improvements to the security organization, the program

management process and control implementation projects in

coordination with the service teams. This includes resolution of

audit findings and the execution of projects originated from

internal assessments

6. Collect evidence in support of audit engagements and the

relationship with the ISO/SOC2 auditors and Amazon service

teams, articulate control implementation and impact, and

establish considerations for applying security, privacy, and

compliance concepts to a technical cloud environment

7. Apply a working knowledge of commercial information security

and privacy regulation and policy to articulate customer and

control impact and drive alignment to controls.

(40 hours / week, 8:00am-5:00pm, Salary Range $128898 - $178400)

Amazon.com is an Equal Opportunity – Affirmative Action Employer – Minority / Female / Disability / Veteran / Gender Identity / Sexual Orientation

#0000

Requirements: Bachelor’s Degree or foreign equivalent degree in Computer Science, Engineering, Management or a related field followed by 5 years of progressively responsible post-baccalaureate

experience in the job offered or a related occupation in security compliance, risk management or related. In the alternative, employer will accept a Master’s Degree or foreign equivalent

degree in Computer Science, Engineering, Management or a related field and 3 years of experience in the job offered or a related occupation in security compliance, risk management or

related.

Experience must include:

1) 3 years of experience in a security compliance or risk management role and/or working with legal and compliance teams

2) 3 years of experience working directly with engineering teams and other security stakeholders

3) 3 years of experience managing compliance technology projects across teams, and building sustainable processes

4) 3 years of experience in risk management, business risk analysis, and making complex business/risk trade-off recommendations and decisions

5) 3 years of experience with security domain areas such as security engineering; application, system and network security; access management; cryptography; data retention and

anonymization; security risk assessment; and current security threats, trends, and mitigations

6) 3 years of experience with risk-based analysis of products, vendors, compliance requirements, and significant operational change

The pay range for this position in Seattle, WA is $128898 - $178400 (yr); however, base pay offered may vary depending on job-related knowledge, skills, and experience. A sign-on bonus and restricted stock units may be provided as part of the compensation package, in addition to a full range of medical, financial, and/or other benefits, dependent on the position offered. This information is provided by Washington Equal Pay Act. Base pay information is based on market location. Applicants should apply via Amazon's internal or external careers site.

#0000