It Compliance Specialist

Do you have experience obtaining and maintaining commercial IT compliance certifications for your organization? Have you worked for a third-party auditor with experience performing IT audits and assessments? Do you see regulatory compliance as a business enabler? Buy with Prime and Multi-Channel Fulfillment (MCF) are looking for a highly motivated Compliance Specialist to join our Security, Compliance, Privacy, & Trust (SCPT) team to support commercial compliance self-assessments, coordinate remediation efforts with service teams, and manage third-party assessment organizations assessments for commercial accreditations (e.g. ISO 27001, SOC 2). You will join industry-leading security professionals to ensure that our services are in compliance with global security and privacy requirements.
Key job responsibilities
Dive deep into the control environment to develop a technical understanding of control implementation and articulate compliance implications to internal and external audit functions.
Improve documentation, coordinate improvement efforts, and monitor process improvement effectiveness.
Operate and plug into organizational mechanisms for managing changes to the control environment and external industry standards requirements; document organizational control activities and confirm readiness of controls for audit.
Develop broad domain and technical knowledge in AWS and Amazon corporate security solutions that support compliance programs.
Communicate and drive remediation and continuous improvements to the security organization, the program management process and control implementation projects in coordination with the service teams. This includes resolution of audit findings and the execution of projects originated from internal assessments.
Collect evidence in support of audit engagements and the relationship with the ISO/SOC2 auditors and Amazon service teams, articulate control implementation and impact, and establish considerations for applying security, privacy, and compliance concepts to a technical cloud environment.
Apply a working knowledge of commercial information security and privacy regulation and policy to articulate customer and control impact and drive alignment to controls.
A day in the life
As part of the SCPT team, you will build bridges between security, technology, operations, and compliance by working directly with our in-scope service teams, infrastructure teams, corporate security teams, and third-party assessors.
About the team
Here at Amazon, we embrace our differences. We are committed to furthering our culture of inclusion. We have ten employee-led affinity groups, reaching 40,000 employees in over 190 chapters globally. We have innovative benefit offerings, and we host annual and ongoing learning experiences, including our Conversations on Race and Ethnicity (CORE) and Amazon (gender diversity) conferences. Amazon's culture of inclusion is reinforced within our 16 Leadership Principles, which remind team members to seek diverse perspectives, learn and be curious, and earn trust.
We are open to hiring candidates to work out of one of the following locations:
Arlington, VA, USA | Santa Clara, CA, USA | Seattle, WA, USA | Tempe, AZ, USA