Senior IT Auditor, Amazon

• The ideal candidate is an experienced technology or security professional who can dive deep into a variety of complex architectures, identify risks and ensure WWAS functions are designed and operating securely
• You must be able to understand complex business processes and identify the full range of risks related to processes, regulatory compliance, organization, policy, and technology
• You should be comfortable interacting with technical software development engineers and business leaders, have a technical background and the ability to learn new technology concepts quickly
• You should be able to translate technical risks into business issues
• You should be able prioritize findings and recommendations and facilitate multiple stakeholders to agree on appropriate solutions and verify that risks are mitigated appropriately
• You must be comfortable performing as a sole contributor or teammate, and coaching and training less experienced auditors
• You must be an excellent writer who can succinctly communicate complicated technical issues in business terms
• You must be a strong project manager who can manage a team and conduct your own audits from beginning to end, often managing multiple projects at once
• BA/BS degree in Management Information Systems, Computer Science, Computer Engineering, or related field
• 4+ years of experience assessing complex system architecture, software development, IT Operations and Compliance, Information Security, and/or Technical Program Management

Desirable

• Amazon’s Internal Audit team is seeking a technology auditor to perform audits across Worldwide Amazon Stores' (WWAS) businesses
• You will have the rare opportunity to dive deep into the internal architecture of Amazon’s infrastructure and services to assess operational risks and security posture
• As a Senior IT Auditor, you will lead the planning, scoping, execution, and reporting of audits based on identified risks
• Assessment scope may include identity and access management, key management, data security/privacy, service monitoring, release management, and service availability
• In this position you will dive deep into the details of your audits to develop meaningful findings that help in communicating the risk to the business
• Through your work and with high judgement and a strong sense of controllership, you will be a champion for positive change