Government Compliance Specialist

Key job responsibilities

• Evaluating the effectiveness and efficiency of compliance program activities and recommend improvements to improve delivery at scale.
• Leading and managing projects and campaigns with excellent project management skills.
• Creating operational mechanisms to address recurring escalation patterns and persistent challenges.
• Simplifying and decomposing security compliance requirements into clear technical specifications and policies.
• Setting the vision and connecting the vision between technology, business strategies and requirements.
• Communicating to senior leadership the status and key deliverables of team initiatives, seeking diverse opinions and leading improvement efforts.
• Leading escalations.
• Influencing incoming and present regulations, legislation, mandates and standards for the betterment of AWS and our customers and reduce the impact to our internal and external stakeholders.
• Fielding and addressing requests for team support in collaboration with internal and external stakeholders.
• Diving deep into the operations of AWS compliance programs to develop broad domain and technical understanding of regulatory and customer expectations to drive process improvement initiatives.
• Bridging communication with both technical engineering and business teams to successfully capture and implement business requirements.
• Transforming raw thoughts into clear technical documentation and/or direction.
• Operating a quality rhythm of the business for managing compliance expectations.
• Using high judgment to distill diverse inputs from large customer segments and stakeholders to set a vision and design the right long-term solutions.
• Leading a large, challenging initiative.

Required Qualifications

• Demonstrated understanding of cloud computing services/deployment architecture.
• Experience working with US Government Compliance Frameworks/Programs including: FedRAMP, DoD SRG, NIST, ISO, FISMA, RMF, OSCAL.
• Record of delivery of IT process improvement projects with technology processes and/or major tech companies.
• Experience in cloud technologies.
• Experience performing 3PAO assessments.
• Experience performing FedRAMP advisory projects.
• Working knowledge of NIST SP 800-53 in relation to cloud technologies.
• Experience in assessments, authorization, and continuous monitoring of cloud services and products.
• Experience in performing technical assessments and documentation of network, operating systems, application security, as well as auditing IT processes.
• Experience developing a security compliance strategy based on product roadmap.
• Understanding of evaluating the design and effectiveness of IT controls.
• Experience in identification, management, monitoring and reporting risks/POA&Ms.
• Industry certification such as CISSP, CISA, and CISM.