Security Compliance Specialist, Amazon Leo Security Assurance

This role supports Amazon Leo’s regulatory and external assurance needs by designing and driving scalable GRC processes. You will build and maintain security and privacy compliance programs and certifications, and work with external auditors and regulators to execute audit readiness and remediation.

• Design and drive scalable GRC processes for regulatory and contractual security and privacy requirements
• Build and maintain compliance certifications (ISO 27001, ISO 22301, NIST 800-53, ISO27701, SOC 2, GDPR, CCPA)
• Liaise with external auditors and regulators to drive assurance programs
• Communicate control implementation, audit results, compliance metrics, risks, and improvements to stakeholders and leadership
• Serve as advisor on audit remediation issues and manage cross-functional GRC requirements to translate them into a GRC tool

The position centers on Governance, Risk, and Compliance (GRC) execution, including mapping security controls to ISO 27001, ISO 22301, NIST 800-53, ISO27701, SOC 2, GDPR, and CCPA requirements. You will translate cross-functional GRC requirements into a GRC tool and manage compliance gaps through remediation and control implementation tracking.

The ideal candidate is an individual contributor experienced in Governance, Risk, and Compliance (GRC) programs, including building and maintaining compliance certifications like ISO 27001, ISO 22301, NIST 800-53, SOC 2, GDPR, and CCPA. They can assess control and process maturity, identify compliance gaps, and drive remediation through to completion while partnering with external auditors and regulators.

Preferred