Security Compliance Manager, Regulations Tech Assurance

# Security Compliance Manager, Regulations Tech Assurance Amazon  
· amazon.com Category:
GRC & Compliance

Location:

Seattle, Washington, USALevel:
Manager## Quality of life

What the posting states. Hover or tap a perk to see the line it came from.
* Paid parental leave
* Retirement match
* Equity* Flexible PTOAmazon's Regulations Tech Assurance organization is looking for a Security Industry Specialist Manager to lead a team of compliance professionals responsible for delivering and maintaining a portfolio of industry certifications and assurance programs — including SOC 2, PCI DSS, ISO 27001, HIPAA, Cyber Essentials, and risk assessments — across a rapidly growing service  this role, you will own the full audit lifecycle from evidence collection through auditor management and finding remediation, drive customer trust processes that directly support sales, and translate compliance requirements into engineering action.

You will also define the strategic vision for how we shift from point-in-time audits to on-demand, continuous compliance — championing investments in AI, automation, and GRC tooling that deliver the highest return. This is a high-visibility role with regular reporting to senior leaders and the opportunity to influence how compliance scales across Amazon's Stores business.

Key job responsibilities

Compliance Program Leadership & Delivery:
Own end-to-end delivery of a portfolio of industry certification and compliance programs (e.g., SOC 2, PCI DSS, ISO 27001, Cyber Essentials, HIPAA, risk assessments), driving prioritization, planning, accountability, and on-time delivery of all compliance outcomes the team is responsible for.

Audit Management & Assurance:
Lead all audit lifecycle activities including evidence collection strategy, auditor relationship management, negotiation of findings and observations, and remediation of identified gaps to maintain and strengthen the organization's compliance posture across multiple frameworks.

Team Leadership, Coaching & Development:
Manage, coach, and develop a team of Security Industry Specialists responsible for a wide variety of security compliance programs; set clear expectations, build a high-performance culture, and ensure the team operates with the depth and rigor expected at each level.

GRC Tooling, Automation & Continuous Monitoring:
Drive adoption and operationalization of GRC tooling across compliance workflows; partner with engineering teams on requirements and priorities to enable automation of evidence collection, control testing, and audit readiness activities.

Customer Trust & Sales Enablement:
Own customer trust processes including maintenance of security documentation repositories, standardized response libraries, and direct support of sales engagements by leading security calls alongside Sales, Legal, and other stakeholders to accelerate deal cycles and build customer confidence.

Executive Reporting & Stakeholder Communication:
Own program-level reporting of compliance status, risk posture, and program updates through established reporting channels to senior leaders across the organization, ensuring visibility, transparency, and informed decision-making at all levels.

Strategic Vision & Scalable Mechanisms:
Define and drive the strategic vision for shifting from point-in-time audit cycles to on-demand, continuous compliance — owning the thinking behind how controls are monitored, evidence is generated, and assurance is delivered on an ongoing basis. Bring informed, opinionated perspectives on where to invest in AI, automation, and GRC engineering for the highest ROI, ensuring the compliance function scales and absorbs the growing demand.

A day in the life About the team Diverse Experiences Amazon Security values diverse…