Senior Security Assurance Specialist , AWS Compliance and Security Assurance EMEA

Senior Security Assurance Specialist , AWS Compliance and Security Assurance EMEA Overview

This role sits within AWS Security Assurance and focuses on helping Amazon demonstrate the strength of its security controls to highly regulated customers, auditors, and regulators. The position is aimed at someone who combines deep audit experience with technical understanding and a strong interest in using automation and modern process design to improve traditionally manual assurance work. The team works at Amazon scale, supporting customers who need high levels of confidence in how AWS services are designed, operated, maintained, and protected.

The successful candidate will help bridge security, technology, and compliance. You will work across internal and external stakeholders to explain how Amazon’s control environment meets local and global regulatory expectations, and you will contribute to improving the way the organization manages audit and compliance obligations. The role calls for someone who is comfortable operating in complex environments, can communicate clearly with both technical and non-technical audiences, and is motivated by solving real business problems in cloud security assurance.

What you will do

• Work with customers, regulators, and auditors to explain how Amazon’s security controls map to local requirements and broader regulatory expectations.
• Build a detailed understanding of Amazon’s control environment so you can describe the security activities in place and explain their compliance implications to internal and external audit teams.
• Develop expertise in regulated-industry compliance obligations and translate those requirements into clear explanations of how Amazon’s control activities support them.
• Serve as a trusted advisor and facilitator for customers, regulators, and auditors, helping them understand how security and compliance concepts are used to monitor, evaluate, and continuously improve the organization.
• Identify and implement improvements to the security assurance function and the wider program management process.
• Share reusable process frameworks, tools, and best practices that can be adopted across teams and organizations.
• Use your knowledge of global information security regulations and policy to explain customer impact, control impact, and alignment with Amazon’s control environment.
• Help customers understand how Amazon’s infrastructure is designed, operated, maintained, and protected in line with regulated-industry standards.
• Contribute to innovative process engineering across multiple teams and organizations to strengthen audit and compliance programs.
• Work directly with senior Amazon leadership to improve the company’s ability to demonstrate assurance for regulated customers.

What the team is looking for

The team values people who bring diverse experiences and encourages applicants even if their background is non-linear or does not match every listed qualification. AWS Security places a high value on ownership, inclusion, and innovation, and expects team members to take responsibility for both the vision and execution of their work while respecting the perspectives of others.

The organization also highlights a strong culture around work-life balance, mentorship, and career development. Team members are supported through knowledge sharing, a broad mix of experience levels, and opportunities to take on increasingly complex work as they grow.

Required background and qualifications

• A bachelor’s degree, or equivalent experience, in information security, computer science, risk management, engineering, mathematics, statistics, or a related discipline.
• Strong business English skills, both written and spoken.
• At least 10 years of experience performing or participating in IT audits and assessments within highly technical cloud-based environments.
• At least 10 years of experience in heavily regulated industries such as financial services, healthcare, energy, or telecommunications, including direct exposure to European audit frameworks and requirements such as DORA.
• Experience conducting IT audits using ISAE 3402, with additional familiarity with COBIT, ITIL, and IT-Grundschutz.
• At least one recognized security, cloud, or audit certification, such as CISA, CISM, CISSP, CCSP, or Amazon Cloud Security Practitioner.
• Ability to understand IT processes, communicate clearly and transparently with customers, and drive process changes across multiple organizations and teams.
• A strong audit foundation combined with a broad technology background.
• Comfort working with many stakeholders, including internal teams, customers, regulators, and auditors.
• Ability to balance your own perspective with the diverse viewpoints of the team and its stakeholders.
• A technically experienced, innovative approach to security, compliance, and audit work, with the ability to solve complex compliance challenges.
• Excellent verbal and written communication skills and the ability to collaborate effectively across internal and external organizations.
• Strong prioritization, multitasking, and deadline-management skills.
• A bias toward action and a track record of improving processes in technical environments.

Preferred experience

• Background in technical security design, compliance consulting, or advisory work in a highly technical environment.
• Solid understanding of cloud services and deployment architecture, ideally including Amazon cloud services.
• Deep knowledge of regulatory guidance such as FCA FG16/5, DORA requirements for critical service providers, Germany’s C5 requirements, and other relevant standards.
• Experience delivering IT process improvement projects and using automated metrics to measure effectiveness and consistency.
• Experience in IT program or project management, IT auditing, and/or the development and implementation of control frameworks.
• Experience creating certification roadmaps based on customer requirements and compliance documentation, and ensuring assessments are completed on schedule.
• Strong understanding of how to evaluate the design and operating effectiveness of IT controls, including experience working with auditors and regulators on these assessments.
• Experience using Governance, Risk, and Compliance tools and related technology.

Culture, growth, and working environment

AWS Security describes itself as a place where security is central to customer trust and where professionals can build experience across a wide range of domains, including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. The company highlights its inclusive culture, employee-led affinity groups, and learning events such as CORE and AmazeCon. It also emphasizes its Leadership Principles, including seeking diverse perspectives, learning continuously, and earning trust.

The team says it supports flexible working hours and encourages employees to maintain a healthy balance between their personal and professional lives. It also stresses mentorship, knowledge sharing, and career growth, with projects assigned to help team members develop into more well-rounded professionals and take on more complex responsibilities over time.

Additional information

Amazon states that it is an equal opportunities employer and makes hiring decisions based on experience and skills. The company also notes that it is committed to protecting candidate privacy and provides a privacy notice for more information about how personal data is collected, used, and transferred. If an applicant needs a workplace accommodation or adjustment during the application, interview, or onboarding process, Amazon directs them to its accommodations information page. The posting also notes that candidates in countries or regions not listed should contact their recruiting partner for guidance.

Degree Requirement: Bachelor’s

Visa Sponsorship May be