Amazon Leo (previously known as Project Kuiper) is an initiative to increase global broadband access through a constellation of over 3,000 Low Earth Orbit (LEO) satellites. Its mission is to bring fast, affordable broadband to unserved and underserved communities worldwide.
At Leo, we are obsessed with customer trust and are seeking an individual contributor who is creative, and passionate about delivering Governance, Risk and Compliance solutions to meet Leo's regulatory and external assurance needs. In this role, you will work collaboratively with various business and security teams across Amazon to identify compliance needs, assess the maturity of processes and controls, design, build, and execute high-impact security or compliance programs and liaise with external auditors and regulators.
Export Control Requirement: Due to applicable export control laws and regulations, candidates must be a U.S. citizen or national, U.S. permanent resident (i.e., current Green Card holder), or lawfully admitted into the U.S. as a refugee or granted asylum.
Security Clearance Requirement: This position requires that the candidate selected be a US Citizen and must currently possess and maintain an active Top Secret security clearance.
Key job responsibilities
• Interpret NIST SP 800-53, Intelligence Community Directives (ICD), Committee on National Security Systems Instruction (CNSSI), and other government compliance requirements and define their applicability to ALG products and services
• Map security controls to applicable frameworks, define control intent and evidence expectations, and verify inherited control dependencies
• Write, articulate, and validate security control narratives and compliance documentation for government authorization packages including SSPs and SCTMs
• Review evidence needed to illustrate key controls across the operational environment, coordinating evidence collection from functional teams
• Prepare assessment packages, support readiness declarations, and field assessor requests during security assessments
• Author Plans of Action and Milestones (POA&Ms) for identified findings and track remediation activities to closure
• Communicate to key stakeholders and leadership on assessment results, compliance posture, key risks, and areas of program improvement
• Coordinate responses to government security inquiries and customer compliance requests
• Dive deep into the control environment to develop broad domain and technical understanding of control activities and articulate compliance to assessors and stakeholders
• Operate a quality rhythm of the business for managing multiple stakeholder expectations simultaneously across compliance domains and authorization timelines
A day in the life
Have you wanted an opportunity to secure an advanced satellite based broadband telecom service? The Leo Security team owns the security of product and operations of Leo end-to-end. We provide the necessary infrastructure and mechanisms to ensure the security of our satellite constellation and provide assurance to our customers and regulators on our security, privacy and resiliency programs. Our team drives the implementation of compliance programs, owns the collaboration with external auditors and regulators.
You will work in a start-up like environment, backed by Amazon's infrastructure to bootstrap security mechanisms, and help instill the security culture in the organization.
BASIC QUALIFICATIONS
- 4+ years of information security and compliance experience
- Bachelor's degree or equivalent
- Knowledge of AWS or cloud technologies
- Experience prioritizing and handling multiple assignments at any given time while maintaining commitment to deadlines, or experience in a fast-paced, high-tech company
- US government security clearance of top secret or above
PREFERRED QUALIFICATIONS
- CISSP, CISA, CISM or other security certification
- Experience in working directly with government officials and regulatory bodies
- Familiarity with satellite communications, telecommunications, or aerospace security environments
- Experience authoring or contributing to security assessment packages, POA&Ms, or authorization documentation
The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits.
USA, VA, Arlington - 102,000.00 - 178,400.00 USD annually