Security Compliance Specialist, Amazon Leo Security Assurance

Amazon Leo (previously known as Project Kuiper) is an initiative to increase global broadband access through a constellation of over 3,000 Low Earth Orbit (LEO) satellites. Its mission is to bring fast, affordable broadband to unserved and underserved communities worldwide. At Leo, we are obsessed with customer trust and are seeking an individual contributor who is creative, and passionate about delivering Governance, Risk and Compliance solutions to meet Leo's regulatory and external assurance needs. In this role, you will work collaboratively with various business and security teams across Amazon to identify compliance needs, assess the maturity of processes and controls, design, build, and execute high-impact security or compliance programs and liaise with external auditors and regulators. Export Control Requirement: Due to applicable export control laws and regulations, candidates must be a U.S. citizen or national, U.S. permanent resident (i.e., current Green Card holder), or lawfully admitted into the U.S. as a refugee or granted asylum. Security Clearance Requirement: This position requires that the candidate selected be a US Citizen and must currently possess and maintain an active Top Secret security clearance. Key job responsibilities ● Interpret NIST SP 800-53, Intelligence Community Directives (ICD), Committee on National Security Systems Instruction (CNSSI), and other government compliance requirements and define their applicability to ALG products and services ● Map security controls to applicable frameworks, define control intent and evidence expectations, and verify inherited control dependencies ● Write, articulate, and validate security control narratives and compliance documentation for government authorization packages including SSPs and SCTMs ● Review evidence needed to illustrate key controls across the operational environment, coordinating evidence collection from functional teams ● Prepare assessment packages, support readiness declarations, and field assessor requests during security assessments ● Author Plans of Action and Milestones (POA&Ms) for identified findings and track remediation activities to closure ● Communicate to key stakeholders and leadership on assessment results, compliance posture, key risks, and areas of program improvement ● Coordinate responses to government security inquiries and customer compliance requests ● Dive deep into the control environment to develop broad domain and technical understanding of control activities and articulate compliance to assessors and stakeholders ● Operate a quality rhythm of the business for managing multiple stakeholder expectations simultaneously across compliance domains and authorization timelines A day in the life Have you wanted an opportunity to secure an advanced satellite based broadband telecom service? The Leo Security team owns the security of product and operations of Leo end-to-end. We provide the necessary infrastructure and mechanisms to ensure the security of our satellite constellation and provide assurance to our customers and regulators on our security, privacy and resiliency programs. Our team drives the implementation of compliance programs, owns the collaboration with external auditors and regulators. You will work in a start-up like environment, backed by Amazon’s infrastructure to bootstrap security mechanisms, and help instill the security culture in the organization.

Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining