Security Assurance Specialist

Job description for a Security Assurance position at Amazon Web Services (Irish Branch). The role focuses on applying technology and automation to traditionally manual processes and scaling security controls across diverse teams and technologies.

• Dive deep into the Amazon control environment to develop a broad domain and technical understanding of our security activities and control implementations, articulating compliance implications to customers and audit functions.
• Develop an understanding of regulated industry compliance requirements and communicate how our activities meet global regulatory obligations.
• Liaise with customers, regulators and auditors; articulate control implementation and describe considerations for applying security and compliance concepts to monitor, evaluate, and continuously improve the organization as a trusted advisor, facilitator and creative problem‑solver.
• Implement continuous improvements to the security organization and the program management process, sharing program/project process frameworks, tools, and best practices across the organization.
• Apply a working knowledge of global information security regulation and policy to articulate customer and control impact and drive alignment to Amazon controls.

Our security team values diverse experiences and offers a culture of ownership, inclusion, and innovation. You will have the opportunity to work directly with senior leadership to improve our ability to demonstrate assurance for regulated customers.

• Bachelor’s degree or equivalent in Computer Science, Engineering, Information Systems Management, Information Security or related fields.
• Nationality of an EU member state.
• 5+ years of experience in IT audits based on ISAE 3401, COBIT, ITIL, IT‑Grundschutz and assessments of highly technical cloud environments.
• 3+ years of experience building risk programs and strategies, staying current with industry trends.
• 5+ years working in highly regulated industries (e.g., financial services, healthcare, energy, telecommunications) with direct experience with European audits and frameworks such as DORA.

• 1 or more industry‑recognised security, cloud or audit certifications (e.g., CISA, CISM, CISSP, CCSP, Amazon Cloud Security Practitioner).
• Experience in technical security design, cloud services/deployment architecture (ideally Amazon cloud services), compliance consulting or advisory work in a highly technical environment.
• Deep understanding of regulatory guidance, including FCA guidance FG16/5, DORA requirements for Critical Service Providers, C5 requirements of the German Federal Office of Information Security, and other applicable standards.
• A record of delivery of IT process improvement projects with technology processes or major tech companies, generating automated metrics to measure effectiveness and consistency.
• Experience building certification roadmaps based on customer requirements and ensuring committed assessments are delivered on schedule.
• Detailed understanding of evaluating the design and effectiveness of IT controls and experience working with auditors and regulators for these assessments.

Amazon is an equal‑opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. You may request workplace accommodations during the application and hiring process.