Role at a glance
- Salary
- $119.3K – $208.9K/yr
- Location
- Arlington, Virginia, United States
- Work arrangement
- On-site
- Employment
- Full-time
- Experience
- 5+ years of SOX and/or Audit engagements experience
- Education
- Bachelor's degree or equivalent in Information Security, Computer Science, Risk Management, Engineering, Math, Statistics, or a related...
Spotted an issue?
We’ll check it against the original posting.
Role Summary
This role is a compliance subject matter expert for Amazon Foundational Security Services, partnering with engineering teams, Security Assurance, internal stakeholders, and external auditors across security assurance programs. The role focuses on FedRAMP and other regulatory compliance in government and air-gapped cloud environments, while modernizing compliance workflows through AI-powered automation and scalable documentation.
What You'll Do
- Own and coordinate SOX, FedRAMP, ISO, and US government regulatory audit programs for Amazon Foundational Security Services.
- Serve as the compliance subject matter expert for foundational security services and support audit readiness.
- Develop and maintain customer-facing compliance documentation describing the security posture of AFSS services.
- Identify manual compliance workflows and build AI agents and LLM-based tooling for evidence collection, control testing, and audit response.
- Support FedRAMP authorization and continuous monitoring in government cloud regions, including air-gapped environments.
- Lead the automation of compliance testing and documentation in partnership with Security Assurance.
Generated from the employer's posting. Verify important details before applying.
View full postingQualifications
Required
- 5+ years of SOX and/or Audit engagements experience
- Knowledge of security technology and concepts (Authentication, Authorization, Single sign-on, Cryptography, etc.)
- Experience with automating and simplifying team development, test, and operations processes
- Experience in regulatory compliance management with government agencies
- Background in security engineering or security services
Preferred
- Bachelor's degree or equivalent in Information Security, Computer Science, Risk Management, Engineering, Math, Statistics, or a related discipline, or equivalent technology experience
- Experience with Machine Learning and Large Language Model fundamentals, including architecture, training/inference lifecycles, and optimization of model execution, or experience building complex software systems that have been...
- Experience architecting, securing, and operating Amazon Web Services
- Experience mentoring or training the engineering community on complex technical issues
- Hands-on experience automating compliance workflows using AI tooling (e.g., building AI agents, prompt engineering, RAG pipelines)
Original job description
Content provided by the employer
Original job description
Content provided by the employer
A significant and growing part of this role involves identifying and implementing AI-powered solutions to automate compliance workflows. You will be expected to get hands-on with AI tooling—building agents, leveraging large language models, and eliminating manual processes. This is not a “future-state” aspiration; it is a core expectation of the role from day one.
This role requires familiarity with compliance in government cloud environments, including air-gapped (isolated) cloud regions. You will support FedRAMP authorization efforts and understand the unique compliance challenges of operating security services in environments with no connectivity to commercial regions.
A key priority for this role is leading the automation of compliance testing and documentation in partnership with Security Assurance. You will drive the modernization of how compliance artifacts are created, maintained, and managed—moving away from manual processes toward automated, scalable solutions that serve as the source of compliance truth across AFSS.
You will dive deep into security technologies such as access control design patterns, identity security services, authorization, authentication, and lifecycle management to support our customers as Amazon continues to scale and grow.
Key job responsibilities
Key Responsibilities
Own and coordinate audit programs (SOX, FedRAMP, ISO, and US government regulatory frameworks) for Amazon Foundational Security Services
Serve as the compliance subject matter expert for foundational security services, partnering with service teams to ensure audit readiness
Develop and maintain customer-facing compliance documentation that clearly communicates the security posture of AFSS services
Identify manual compliance workflows and design AI-powered automation solutions to eliminate toil and improve accuracy
Build and deploy AI agents and LLM-based tooling to streamline evidence collection, control testing, and audit response
Support FedRAMP authorization and continuous monitoring for foundational security services in government cloud regions, including air-gapped (isolated) environments
Navigate the unique compliance requirements of air-gapped clouds, including evidence collection, control implementation, and audit coordination without connectivity to commercial regions
Lead the automation of compliance testing and documentation in partnership with Security Assurance, modernizing how compliance artifacts are created, maintained, and managed at scale
Engage with internal stakeholders (engineering, legal, product) and external auditors to support certification and attestation efforts
Stay current on evolving compliance requirements, US government regulations, and industry best practices
Dive deep into security technologies including access control, identity, authorization, authentication, and lifecycle management.
A day in the life
Amazon has a fast-paced environment—“Work Hard, Have Fun, Make History.” In this role, you will work with security service teams to design compliance approaches, automate manual processes using AI tooling, support active audit engagements, and develop customer documentation. You will look for new approaches to automate fixes for operational compliance issues and use AI and Amazon Security services to solve design problems.
Our team also puts a high value on work-life balance. A healthy balance between your personal and professional life is crucial to your happiness and success here.
About the team
AFSS Compliance is a collaborative team building the future of automated security compliance.
We value diverse experiences and encourage you to apply even if you don't meet every preferred qualification. Our inclusive, curious culture invests in your growth through knowledge-sharing, training, and mentorship, and we champion work-life harmony with the flexibility to succeed both in and outside of work.
Basic Qualifications
- 5+ years of SOX and/or Audit engagements experience- Knowledge of security technology and concepts (Authentication, Authorization, Single sign-on, Cryptography, etc.)
- Experience with automating and simplifying team development, test, and operations processes
- Experience in regulatory compliance management with government agencies
- Background in security engineering or security services
Preferred Qualifications
- Bachelor's degree or equivalent in Information Security, Computer Science, Risk Management, Engineering, Math, Statistics, or a related discipline, or equivalent technology experience- Experience with Machine Learning and Large Language Model fundamentals, including architecture, training/inference lifecycles, and optimization of model execution, or experience building complex software systems that have been successfully delivered to customers
- Experience architecting, securing, and operating Amazon Web Services
- Experience mentoring or training the engineering community on complex technical issues
- Hands-on experience automating compliance workflows using AI tooling (e.g., building AI agents, prompt engineering, RAG pipelines)
Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.
Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.
The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits.
USA, VA, Arlington - 119,300.00 - 208,900.00 USD annually
About the company
amazon
Large Enterprise
Amazon is a global leader in e-commerce and cloud computing, founded in 1994 by Jeff Bezos. Initially starting as an online bookstore, it has since expanded its offerings to include a vast range of products and services, including electronics, fashion, and digital content. With Amazon Web Services (AWS), the company also provides powerful cloud solutions to businesses around the world. Known for its innovation, customer-centric approach, and commitment to operational efficiency, Amazon continues to shape the future of retail and technology, consistently seeking new ways to enhance customer experiences.
Amazon is a global leader in e-commerce and cloud computing, founded in 1994 by Jeff Bezos. Initially starting as an online bookstore, it has since expanded its offerings to include a vast range of products and services, including electronics, fashion, and digital content. With Amazon Web Services (AWS), the company also provides powerful cloud solutions to businesses around the world. Known for its innovation, customer-centric approach, and commitment to operational efficiency, Amazon continues to shape the future of retail and technology, consistently seeking new ways to enhance customer experiences.