Program Security Officer, Amazon Leo for Government (ALG)

The Amazon Leo for Government (ALG) Industrial Security team designs, builds, and implements security assurance and compliance programs in line with formal National Industrial Security Program (NISP) requirements and U.S. Government directives (DoD, IC).

We are seeking a Security Industry Specialist II to join a team of industry-leading security professionals who leverage deep expertise in government security compliance regimes to deliver assurance about the design and operational effectiveness of security controls across Amazon"s classified operations. In this role, you will apply your knowledge of NISPOM (32 CFR Part 117), ICD 705, and related government directives to execute security compliance processes, deliver security assurance products, and engage directly with government security officials to validate that Amazon"s security posture meets their expectations.

This position requires that the candidate selected be a US Citizen and must currently possess and maintain an active TS/SCI security clearance.

Key job responsibilities

Security Assurance & Compliance Program Execution

• Leverage specific expertise with the NISPOM and related government security compliance frameworks to make sound decisions on delivering assurance about Amazon"s security and control environment at accredited facilities.
• Design and execute security compliance processes across personnel security (PERSEC), physical security (PHYSEC), and industrial security disciplines, including identifying internal enhancements based on compliance expectations and designing continuous monitoring for security controls.
• Leverage existing mechanisms (evidence repositories, templates, engagement runbooks, Standard Operating Procedures) to deliver security assurance and fulfill government compliance requirements.
• Prepare for and support DCSA security reviews, assessments, and vulnerability assessments; scope and negotiate engagement parameters with government assessors.

Security Design & Accreditation

• Implement security design and accreditation requirements for SCIFs and secure areas in accordance with ICD 705 and applicable construction/accreditation standards.
• Conduct physical security vulnerability assessments, self-inspections, and remediation tracking to maintain compliance posture.
• Administer access control, alarm/IDS, and CCTV programs for accredited and controlled spaces; maintain GSA-approved containers, combinations, keys, and end-of-day security checks (SF-701/SF-702).

Governance, Risk & Compliance Operations

• Administer the clearance lifecycle (initiations, reinvestigations, eligibility, and access determinations) in DISS/NBIS; process adverse information reports, SEAD 3 self-reporting submissions, and continuous evaluation/vetting alerts.
• Conduct security in-processing/out-processing, indoctrinations, and debriefings (SF-312 execution); manage visit authorization requests (VARs) and program access rosters; enforce need-to-know.
• Lead preliminary inquiries and investigations of security incidents, violations, and classified disclosures; draft incident reports, damage assessments, and corrective actions.
• Safeguard classified and Controlled Unclassified Information (CUI) per NISPOM and DoD Manual 5200.01; handle, mark, transmit, and destroy classified material.
• Support Facility Clearance (FCL) sponsorship, maintenance, and DD-254 flow-down management.

Cross-Team Influence & Process Improvement

• Work across teams within the ALG Security organization to influence goals, priorities, and trade-offs (e.g., recommending how to prioritize compliance requirements that could impact security operations).
• Optimize cross-functional processes that improve projects and goals pertaining to security compliance risks, controls, and evidence.
• Convey detailed technical and industry knowledge (verbally, in writing, and via diagram) to engineering, program management, and business teams - including control language, compliance impact assessments, and strategy documents.
• May influence vendors and external partners (e.g., DCSA, customer security officials, contractors) on engagement scope and assurance techniques.
• Support the Insider Threat Program: behavioral indicators, referrals, and coordination with CI as required.
• Maintain security education, training, and awareness programs and records; teach others on NISPOM compliance requirements.

Security Clearance: Candidates must have recent or active US Government security clearance of TS/SCI (with polygraph preferred) and be able to maintain a TS/SCI security clearance, so you must be a U.S. citizen for consideration

A day in the life

Your program security assurance/compliance strategy is defined by leadership; the design and process to execute it are not. You deliver with guidance, taking defined compliance objectives and designing the tactical processes to achieve them. Each day you drive timely decisions, make trade-offs between time, quality, and resources, and escalate appropriately when blockers emerge. You implement straightforward solutions to mitigate risk and overcome roadblocks with limited guidance, leveraging existing mechanisms to deliver security assurance. You are learning to work strategically and beginning to influence external industry and regulatory initiatives.

About the team

The ALG Industrial Security team is responsible for designing, building, and implementing security assurance and compliance programs for Amazon Leo Government efforts in line with formal requirements and government directives. We deep dive into industrial security requirements for cleared operations, including the development, management, and implementation of all Executive Orders, IC, and NISP processes, procedures, and requirements related to clearance lifecycles and accredited Leo locations.