IT Auditor - AWS Technology Risk

Description

At Amazon we're working to be the most customer-centric company on earth, and that includes protecting our customers and their data. To get there, we need exceptionally talented, bright, and driven people. Do you have a passion for architecture, security, software design and innovative technologies? Do you see security, compliance and risk management as business enablers?

Amazon’s Internal Audit team is seeking a technology auditor to perform assessments of Amazon Web Services (AWS). You will have the rare opportunity to dive deep into the internal architecture of AWS infrastructure and services to assess operational risks and security posture.

This position will challenge your current understanding of AWS services. You will have a broad technical background and the ability to learn new technology concepts quickly. You are someone who is curious and known for diving deep into subject matter, taking ownership, and encouraging innovative and pragmatic solutions to complex problems. In addition, you will have solid business judgment, enthusiasm for risk management, the ability to gain trust and respect of business leaders, and the capability to guide a fast-paced organization to the right results.

Up to 10% travel may be required, including international travel.

Key job responsibilities
- The ideal candidate is an experienced technology or security professional who can dive deep into a variety of complex architectures, identify risks and ensure AWS services are designed and operating securely.
- You will support the planning, scoping, execution, and reporting based on identified risks. Assessment scope may include identity and access management, key management, data security/privacy, service monitoring, release management, and service availability.
- You will bring independent and objective points of view to provide support to service teams and their partners to identify opportunities for control improvements to mitigate risks, ensure compliance and improve operational performance. In this capacity, you will gain valuable exposure to many areas of our global business.

Basic Qualifications

- Bachelor's degree in Computer Science, Computer Engineering, Information Management, Information Systems, or other related discipline
- 2+ years of experience with technology risk, IT security audit, compliance and/or relevant regulatory knowledge

Preferred Qualifications

- Professional auditing qualification, or similar risk or compliance credentials
- Experience with SQL and Excel
- Experience in any combination of the following: application security frameworks, security code reviews, incident response, secure infrastructure, penetration testing, mobile security, cloud security, AI security, identity and access controls, threat modeling, cryptography, threat intelligence, or secure software development
- Knowledge of one or more of the following domains: access-control system and methodology, network security, application- and system-development security, security architecture and models, cryptography, and operations security
- CISSP, CISA, CISM or other security certification
- Experience that includes strong analytical skills, attention to detail, and effective communication abilities, or experience with programming/scripting (Batch, VB, PowerShell, Java, C#, Chef, Perl, Ruby and/or PHP) and experience in SQL Server/MySQL
- Experience with IT compliance and risk management requirements (e.g. security, privacy, SOX, HIPAA etc.)

Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.

The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits.