Technical Program Manager, Leo Security
Listed on 2026-01-03
-
IT/Tech
Cybersecurity, IT Project Manager
We are open to hiring candidates to work out of one of the following locations:
Arlington, VA, USA | Redmond, WA, USA
Amazon Leo is Amazon’s low Earth orbit satellite broadband network. Its mission is to deliver fast, reliable internet to customers and communities around the world, and we’ve designed the system with the capacity, flexibility, and performance to serve a wide range of customers, from individual households to schools, hospitals, businesses, government agencies, and other organizations operating in locations without reliable connectivity.
Export Control Requirement:
Due to applicable export control laws and regulations, candidates must be a U.S. citizen or national, U.S. permanent resident (i.e., current Green Card holder), or lawfully admitted into the U.S. as a refugee or granted asylum.
LSA (Leo Security Assurance) encompasses key functions that support compliance, audit readiness, and operational efficiency. It ensures compliance through scalable programs, tested controls, and continuous monitoring, while embedding compliance into services. It enables successful audits by supporting audit planning, evidence management, and stakeholder engagement. Additionally, it enhances efficiency through GRC tooling, workflow automation, and scalable reporting to support ongoing assurance activities.
Our team is at the forefront of enabling security and compliance at scale across Amazon Leo. We work directly with Leo’s service teams to embed security, governance, and audit-readiness into their products and operations.
We are looking for a passionate, innovative, results oriented technical program manager. You are someone who loves managing programs and is committed to formulating and implementing wide-ranging process improvements. As a Technical Program Manager (TPM) in the Leo Security Assurance team, you will own the successful delivery of a multi-year program to implement Governance, Risk, and Compliance (GRC) tooling for the organization.
This role requires strong program ownership, cross-team coordination, and deep understanding of security, audit, and compliance requirements. You will ensure the GRC roadmap, prioritization, and delivery milestones align to Leo’s Security Assurance outcomes, while guiding a team of software engineers and partnering closely with compliance, security, and AWS platform teams.
We are a multidisciplinary group of security specialists, software engineers, and program managers focused on solving complex compliance challenges. Our mission is to design and implement solutions that meet the stringent expectations of external regulators and our most security-conscious customers.
Key job responsibilitiesOwn and deliver the end-to-end roadmap for GRC tool implementation, ensuring all releases align with Leo Security Assurance’s long-term audit, compliance, and risk management outcomes.
Lead multi-workstream program planning and execution, including scope definition, prioritization, timelines, risk mitigation, and status reporting for engineering and business stakeholders.
Drive requirements gathering across compliance, audit, and security teams, ensuring requirements are clear, complete, and validated before engineering begins implementation.
Partner closely with software engineers to translate compliance/control requirements into actionable technical specifications and ensure high-quality, secure delivery.
Coordinate integration with AWS GRC platform teams and internal platform or infrastructure teams, managing dependencies and ensuring seamless technical alignment.
Ensure the GRC tools support key compliance frameworks (e.g., SOC, SOX, ISO, FedRAMP, internal controls) and continuously refine features to meet evolving audit needs.
Proactively identify and manage risks, issues, and program blockers, driving timely decisions and escalations to maintain delivery momentum.
Lead process improvement and automation initiatives, leveraging the GRC platform to reduce manual work, improve evidence collection, and increase operational efficiency.
Provide clear, data-driven communication to senior leadership, including program status, risks, decisions needed, and measurable impact on…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).