Amazon Security Risk Specialist Stores & Compliance 

United States, Washington, Seattle 

95462552

This role will support security excellence initiatives within SRC, analyzing operations, identifying opportunities, assessing risk, and managing the execution of projects.In this role, you'll help support our mission: empowering leaders with the insights they need to manage risks and drive innovation securely. You will have the opportunity to challenge traditional risk management methods, pushing the boundaries to make data-driven decisions that have a real impact on our organization and our customers.Key job responsibilities
- Establish regular reporting mechanisms for measuring compliance and performance;
- Support Continuous Monitoring initiatives to drive enforcement, oversight and improvement of security controls implementation through automation- Monitor and oversee performance against Key Risk Indicators, including “Path to Green” plans
Diverse Experiences
Amazon Security values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.
Work/Life BalanceTraining and Career Growth
We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.

- 3+ years’ experience implementing risk management frameworks and assessing security risks of devices, services, and applications with an expertise in conducting risk assessments
- Strong data-driven analytical skills, with experience in establishing and tracking program metrics
- Experience effectively articulating recommendations/conclusions both verbally and in written form

- Knowledge of cloud-based models (IaaS, PaaS, SaaS) and technologies used to implement controls within these environments
- Ability to communicate and manage information security concepts and requirements to personnel of varying technical backgrounds and positions
- Functional experience across two or more information and cyber security domains (e.g., application security, identity and access management, vulnerability management, Continuous Monitoring)
- Experience with secure development
- Proficient in data analysis and visualization