Address
Form of workAt Amazon we're working to be the most customer-centric company on earth, and that includes protecting our customers and their data. To get there, we need exceptionally talented, bright, and driven people. Do you have a passion for architecture, security, software design and innovative technologies? Do you see security, compliance and risk management as business enablers? Amazon's Internal Audit team is seeking a technology auditor to perform assessments of Amazon Web Services. You will have the rare opportunity to dive deep into the internal architecture of AWS infrastructure and services to assess operational risks and security posture.
The ideal candidate is an experienced technology or security professional who can dive deep into a variety of complex architectures, identify risks and ensure AWS services are designed and operating securely. You will support the planning, scoping, execution, and reporting based on identified risks. Assessment scope may include identity and access management, key management, data security/privacy, service monitoring, release management, and service availability.
You will bring independent and objective points of view to provide support to service teams and their partners to identify opportunities for control improvements to mitigate risks, ensure compliance and improve operational performance. In this capacity, you will gain valuable exposure to many areas of our global business.
This position will challenge your current understanding of AWS services. You will have a broad technical background and the ability to learn new technology concepts quickly. You are someone who is curious and known for diving deep into subject matter, taking ownership, and encouraging innovative and pragmatic solutions to complex problems. In addition, you will have solid business judgment, enthusiasm for risk management, the ability to gain trust and respect of business leaders, and the capability to guide a fast-paced organization to the right results.
Up to 10% travel may be required, including international travel.
We are open to hiring candidates to work out of one of the following locations:
Arlington, VA, USA | Seattle, WA, USA
BASIC QUALIFICATIONS
Basic Qualifications
- BA/BS degree in Computer Science, Computer Engineering, Management Information Systems, or related field
- 2+ years of experience assessing complex system architecture, software development, IT Operations and Compliance, Information Security, and/or Technical Program Management.
PREFERRED QUALIFICATIONS
Preferred Qualifications
- Experience performing architecture design reviews, threat modeling, and security reviews of hardware and software.
- Technical knowledge of at least two of: application security, system security, network security, authentication/authorization protocols, or cryptography. Hands-on experience in at least one of the above.
- Big 4 accounting or consulting firm experience with technical or information security background.
- Relevant certifications (CISA, CISSP, CISM, CFE).
- Experience writing data queries or scripts, implementing technical solutions, or other related skills learned from IT related jobs.
- Experience with multiple compliance standards, such as: PCI DSS, SOC 1/2/3, ISO 27001/27017/27018, FedRAMP, COBIT, and/or ITIL
Amazon is committed to a diverse and inclusive workplace. Amazon is an equal opportunity employer and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status. For individuals with disabilities who would like to request an accommodation, please visit https://www.amazon.jobs/en/disability/us.
