Amazon Leo is an initiative to increase global broadband access through a constellation of more than 3,000 low Earth orbit (LEO) satellites. Its mission is to bring fast, affordable broadband to unserved and underserved communities worldwide.
At Amazon Leo, we are obsessed with customer trust. We are looking for a hands-on individual contributor who is passionate about building Governance, Risk, and Compliance (GRC) programs that meet Leo's regulatory, contractual, and external assurance needs. In this role, you will partner with business, engineering, and security teams across Amazon to identify compliance requirements, assess how mature processes and controls are, and design, build, and run high-impact compliance programs. You will also work directly with external auditors and regulators.
As a Security Compliance Specialist on the Leo Security Assurance team, you will drive compliance across Leo's space and ground systems, networks, and infrastructure. Much of this work is new, so you will often work in areas with no established playbook, clear owner, or defined scope. You will bring structure to that ambiguity and build compliance programs that scale as Leo grows.
The ideal candidate is an experienced security compliance and audit professional with a solid understanding of systems, security, and privacy processes. You have built and maintained compliance with frameworks such as NIST 800-53 and NIS 2, mapped controls across frameworks, assessed control design and operating effectiveness, managed evidence collection, and led audits from readiness through remediation. You communicate clearly with technical and non-technical audiences, and you look for ways to use automation and AI to make compliance work more efficient and reliable.
This role is based in Arlington, Virginia or Redmond, Washington.
Export Control Requirement:
Due to applicable export control laws and regulations, candidates must be a U.S. citizen or national, U.S. permanent resident (i.e., current Green Card holder), or lawfully admitted into the U.S. as a refugee or granted asylum.
Key job responsibilities
Design and drive scalable GRC processes that meet Leo's regulatory and contractual security and privacy requirements, including translating cross-functional requirements into the GRC tool
Build and maintain certifications and attestations such as ISO 27001, ISO 22301, ISO 27701, SOC 2, and NIST 800-53, and support compliance with regulations such as NIS 2, GDPR, and CCPA, mapping controls across frameworks so evidence is collected once and reused
Identify applicable controls, assess readiness and gaps, test control design and operating effectiveness, and drive remediation with control owners to completion, confirming that fixes address root causes
Lead audits and assurance engagements with external auditors, regulators, and other Amazon security teams, preparing evidence and control owners and explaining how controls are implemented in a complex technical environment
Design and use automation and AI to streamline evidence collection, control testing, and continuous compliance monitoring
Define and report compliance metrics, audit results, key gaps, and program improvements to stakeholders and leadership, and escalate clearly when needed
Work with Engineering, Security, Business Development, Legal, and Privacy teams to identify upcoming compliance and regulatory requirements and define practical solutions
Bring structure to new and fast-changing areas, and build action plans that balance short-term and long-term priorities
About the team
Diverse Experiences
Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.
Why Amazon Security?
At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores.
Inclusive Team Culture
In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices.
Training & Career Growth
We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.
