Sr. Industry Specialist, AFSS Compliance

This role sits at the intersection of compliance, security engineering, and AI-driven automation. You will serve as a subject matter expert for compliance programs supporting Amazon Foundational Security Services (AFSS), working closely with engineering teams and external auditors to ensure our services meet the highest bar for security assurance.

A significant and growing part of this role involves identifying and implementing AI-powered solutions to automate compliance workflows. You will be expected to get hands-on with AI tooling—building agents, leveraging large language models, and eliminating manual processes. This is not a “future-state” aspiration; it is a core expectation of the role from day one.

This role requires familiarity with compliance in government cloud environments, including air-gapped (isolated) cloud regions. You will support FedRAMP authorization efforts and understand the unique compliance challenges of operating security services in environments with no connectivity to commercial regions.

A key priority for this role is leading the automation of compliance testing and documentation in partnership with Security Assurance. You will drive the modernization of how compliance artifacts are created, maintained, and managed—moving away from manual processes toward automated, scalable solutions that serve as the source of compliance truth across AFSS.

You will dive deep into security technologies such as access control design patterns, identity security services, authorization, authentication, and lifecycle management to support our customers as Amazon continues to scale and grow.

Key job responsibilities

Key Responsibilities

Own and coordinate audit programs (SOX, FedRAMP, ISO, and US government regulatory frameworks) for Amazon Foundational Security Services

Serve as the compliance subject matter expert for foundational security services, partnering with service teams to ensure audit readiness

Develop and maintain customer-facing compliance documentation that clearly communicates the security posture of AFSS services

Identify manual compliance workflows and design AI-powered automation solutions to eliminate toil and improve accuracy

Build and deploy AI agents and LLM-based tooling to streamline evidence collection, control testing, and audit response

Support FedRAMP authorization and continuous monitoring for foundational security services in government cloud regions, including air-gapped (isolated) environments