Trust and Privacy Risk Manager, Devices & Services Trust, Privacy, and Accessibility (TPA)

Amazon • Arlington, VA

5d • Hybrid

About The Position

The Devices & Services Trust, Privacy and Accessibility (DSTPA) team is responsible for maintaining and raising the trust bar for Amazon customers across a diverse set of 30+ Devices and Services. We offer horizontal services for builders to ensure trust, privacy, and accessibility is built into our products and services. We also build customer-facing capabilities that provide customers with control and transparency while reducing trust risks, and enable partner teams to innovate with appropriate guardrails for content moderation, privacy, customer promises, accessibility, fairness, and trust. The DSTPA team is seeking a Risk Manager II with privacy, data protection, and risk management expertise. This position requires detail-oriented incident lifecycle management and execution of trust risk projects within defined risk strategies. You will work with builder, engineering, product, legal, and other teams to manage escalated events, execute compliance campaigns, and support operational excellence across D&S trust and privacy programs.

Requirements

• 6+ years of Incident Management, Threat Management, Corporate Investigations, Law Enforcement, Security Operations, Crisis Management or related field experience
• 2+ years of working cross functionally with tech and non-tech teams experience
• Experience working with technical and product stakeholders to define requirements, prioritize features, and influence product roadmaps
• 4+ years of defining and implementing process improvement initiatives using data and metrics experience
• Bachelor's degree in a relevant field or equivalent work experience
• Knowledge of database systems and SQL
• Experience in risk management and internal audit including: performing risk assessments and audits, designing controls, managing enterprise control frameworks, and prioritizing risk
• Experience working in fast paced environments, and managing workload even during times of stress, or escalated activity
• Experience managing communication with geographically distributed teams

Nice To Haves

• 3+ years of compliance program management, legal, governance, audit, risk/loss prevention, or equivalent experience
• Experience leading process improvement, systems development, and project management
• Experience that includes strong analytical skills, attention to detail, and effective communication abilities, or experience with automation and any version control tools and experience with programming/scripting (Batch, VB, PowerShell, Java, C#, Chef, Perl, Ruby and/or PHP)
• Experience with Asana Project Management Platform, or proven experience with a similar intake and project management tool
• Experience managing reporting and analysis
• Experience in an Executive Escalations role or position handling high visibility, escalated scenarios requiring excellent written and verbal communication
• Experience prioritizing and handling multiple assignments at any given time while maintaining commitment to deadlines, or experience in a fast-paced, high-tech company
• Experience building test automation frameworks and tools
• Experience in one or more of the following fields: technical, security or privacy education/training, information security, incident response, risk management, corporate communications, program management, project management, psychology or other related field

Responsibilities

• Identify and assess customer trust risks throughout the product and data handling lifecycle using established methodologies, conducting technical risk assessments on straightforward systems and features within defined risk frameworks
• Work with engineering teams to integrate trust-by-design and trust-by-default principles into system and product development by defining functional requirements for technical trust-preserving controls
• Test and validate customer trust controls through execution of test cases, ensuring operational behavior aligns with trust requirements and policies while performing closed loop validation on remediated risks and issues
• Support deployment and maintenance of "paved paths" - standardized, scalable customer trust solutions and guidance - by authoring SOPs for using existing trust tools and applying established trust patterns to prevent recurrence of known risks
• Configure and maintain dashboards and reporting to track campaign progress and trust metrics, setting up automated alerts for SLA breaches and risk threshold violations while using SQL or KQL queries for compliance reporting
• Collaborate with legal, compliance, engineering, and product teams to bridge the gap between policy and technical implementation, ensuring customer trust is an enabler for business objectives through clear requirements and validation
• Manage escalated events and cases from intake through resolution, authoring detailed case notes and reports while tracking assessment, validation, and remediation actions to ensure timely execution within established SLAs
• Monitor operational scorecards and metrics dashboards, knowing risk thresholds and taking appropriate actions when exceeded while executing trust and privacy compliance campaigns
• Identify opportunities to optimize previously defined controls and processes to improve team efficiency, applying risk-management best practices and authoring Standard Operating Procedures and workflow documentation

Benefits

• health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage)
• 401(k) matching
• paid time off
• parental leave
• sign-on payments
• restricted stock units (RSUs)

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: Associate degree