Risk Manager, AWS Compliance & Security Assurance, Singapore

At Amazon Web Services (AWS), Security is our highest priority. The AWS Security Assurance team is responsible for demonstrating the security controls of services offered by AWS. At our scale, we invent new ways to provide the highest level of assurance to our most security conscious customers.

Our team works closely with customers across industries, their auditors, and regulatory agencies to understand the security shift from on‑premise to the cloud, to safeguard the cloud, and to ensure customer capabilities are secure. Security Assurance specialists ensure AWS meets customers audit, assurance, and regulatory expectations.

We are looking for detail‑oriented and passionate candidates to join our growing team of audit specialists, where you will develop foundational expertise in cloud security assurance. You will support audit evidence collection and contribute to defined audit programs across Asia‑Pacific.

You should have a strong interest in geopolitics, developing audit skills, regulatory analysis, and learning about technology. Team members and management alike take a high degree of ownership for their program, vision, and execution. You will work directly with most divisions across AWS to build the tools and evidence needed to demonstrate assurance for our customers.

• Collect, organize, and deliver audit evidence for defined assurance programs, initially focused on South Korea and select Asia‑Pacific geographies, under the guidance of senior team members.
• Support the development and maintenance of mappings between AWS controls and audit evidence, contributing to evidence collection automation initiatives led by the team.
• Develop working knowledge of the Amazon control environment, including security activities and control implementations, applying this understanding to assigned audit and evidence collection activities.
• Build foundational understanding of regulated industry compliance requirements relevant to assigned programs, and support communication of how AWS control activities address specific regulatory obligations.
• Develop and maintain standard operating procedures (SOPs), workflows, and documentation related to audit evidence collection and compliance activities.
• Track and manage project milestones, identify blockers, and escalate issues appropriately to ensure timely delivery of audit and compliance activities.
• Apply risk management best practices and methodologies to assigned compliance and audit activities, understanding risk thresholds and taking appropriate actions when thresholds are exceeded.
• Produce clear and concise written documentation including audit results, status reports, and escalation summaries for review by team leads and managers.
• Promote a culture of compliance within the team by staying current on relevant regulations and best practices applicable to assigned audit programs.

• Experience with MS Office, MS Excel, and data retrieval languages.
• Experience in English-language communication skills, both written and verbal.
• Bachelor’s degree or 3 years of industry experience in data collection and data entry.

• Experience working with or having knowledge of cloud computing and existing cloud technologies.
• Experience in handling internal & external audits.