Trust and Privacy Risk Manager

Description

Devices & Services Trust, Privacy and Accessibility (DSTPA) is responsible for maintaining and raising the trust bar for Amazon customers across a diverse set of 30+ Devices and Services. We offer horizontal services for builders to ensure trust, privacy, and accessibility is built into our products and services. We also build customer-facing capabilities that provide customers with control and transparency while reducing trust risks, and enable partner teams to innovate with appropriate guardrails for content moderation, privacy, customer promises, accessibility, fairness, and trust.

The DSTPA team is seeking a Risk Manager II with privacy, data protection, and risk management expertise. This position requires detail-oriented incident lifecycle management and execution of trust risk projects within defined risk strategies. You will work with builder, engineering, product, legal, and other teams to manage escalated events, execute compliance campaigns, and support operational excellence across D&S trust and privacy programs.

Key job responsibilities
- Identify and assess customer trust risks throughout the product and data handling lifecycle using established methodologies, conducting technical risk assessments on straightforward systems and features within defined risk frameworks
- Work with engineering teams to integrate trust-by-design and trust-by-default principles into system and product development by defining functional requirements for technical trust-preserving controls
- Test and validate customer trust controls through execution of test cases, ensuring operational behavior aligns with trust requirements and policies while performing closed loop validation on remediated risks and issues
- Support deployment and maintenance of "paved paths" - standardized, scalable customer trust solutions and guidance - by authoring SOPs for using existing trust tools and applying established trust patterns to prevent recurrence of known risks
- Configure and maintain dashboards and reporting to track campaign progress and trust metrics, setting up automated alerts for SLA breaches and risk threshold violations while using SQL or KQL queries for compliance reporting
- Collaborate with legal, compliance, engineering, and product teams to bridge the gap between policy and technical implementation, ensuring customer trust is an enabler for business objectives through clear requirements and validation
- Manage escalated events and cases from intake through resolution, authoring detailed case notes and reports while tracking assessment, validation, and remediation actions to ensure timely execution within established SLAs
- Monitor operational scorecards and metrics dashboards, knowing risk thresholds and taking appropriate actions when exceeded while executing trust and privacy compliance campaigns
- Identify opportunities to optimize previously defined controls and processes to improve team efficiency, applying risk-management best practices and authoring Standard Operating Procedures and workflow documentation

A day in the life
You'll start your day triaging newly reported issues within your assigned risk area. Throughout the day, you'll coordinate with teams to validate trust and privacy control requirements, execute controls testing using established methodologies, update operational scorecards, and manage case resolution. You'll work with builders to ensure trust-by-design principles are applied to new features, validate that delivered controls meet acceptance criteria, and maintain project schedules. The role requires attention to detail and the ability to distinguish between important and urgent tasks while managing multiple straightforward risk projects and engineering priorities simultaneously.

About the team
Trust Review & Incident management is a "horizontal" organization responsible for building technologies, programs, and services at Amazon scale that instill and grow customer trust, create mechanisms to confidently attain existing and ever-evolving regulatory objectives, and ensure the efficiency and effectiveness of our business partners and stakeholders to meet their obligations without disruption.
Our team values collaboration, continuous learning, and operational excellence. As a Risk Specialist I, you'll play an important role in executing risk management best practices, managing product backlogs for distributed engineering teams, supporting trust-by-design initiatives, and contributing to team culture through knowledge sharing and mentorship. Our team is dedicated to supporting new members with a broad mix of experience levels and tenures, building an environment that celebrates knowledge sharing and mentorship.

Basic Qualifications

- 6+ years of Incident Management, Threat Management, Corporate Investigations, Law Enforcement, Security Operations, Crisis Management or related field experience
- 2+ years of working cross functionally with tech and non-tech teams experience
- Experience working with technical and product stakeholders to define requirements, prioritize features, and influence product roadmaps
- 4+ years of defining and implementing process improvement initiatives using data and metrics experience
- Bachelor's degree in a relevant field or equivalent work experience
- Knowledge of database systems and SQL
- Experience in risk management and internal audit including: performing risk assessments and audits, designing controls, managing enterprise control frameworks, and prioritizing risk
- Experience working in fast paced environments, and managing workload even during times of stress, or escalated activity
- Experience managing communication with geographically distributed teams

Preferred Qualifications

- 3+ years of compliance program management, legal, governance, audit, risk/loss prevention, or equivalent experience
- Experience leading process improvement, systems development, and project management
- Experience that includes strong analytical skills, attention to detail, and effective communication abilities, or experience with automation and any version control tools and experience with programming/scripting (Batch, VB, PowerShell, Java, C#, Chef, Perl, Ruby and/or PHP)
- Experience with Asana Project Management Platform, or proven experience with a similar intake and project management tool
- Experience managing reporting and analysis
- Experience in an Executive Escalations role or position handling high visibility, escalated scenarios requiring excellent written and verbal communication
- Experience prioritizing and handling multiple assignments at any given time while maintaining commitment to deadlines, or experience in a fast-paced, high-tech company
- Experience building test automation frameworks and tools
- Experience in one or more of the following fields: technical, security or privacy education/training, information security, incident response, risk management, corporate communications, program management, project management, psychology or other related field

Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.

Los Angeles County applicants: Job duties for this position include: work safely and cooperatively with other employees, supervisors, and staff; adhere to standards of excellence despite stressful conditions; communicate effectively and respectfully with employees, supervisors, and staff to ensure exceptional customer service; and follow all federal, state, and local laws and Company policies. Criminal history may have a direct, adverse, and negative relationship with some of the material job duties of this position. These include the duties and responsibilities listed above, as well as the abilities to adhere to company policies, exercise sound judgment, effectively manage stress and work safely and respectfully with others, exhibit trustworthiness and professionalism, and safeguard business operations and the Company’s reputation. Pursuant to the Los Angeles County Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.

The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits.