Regulatory Assurance Lead, Security & Privacy Regulatory Enablement (SPRe)

Amazon.com Services LLC•4h ago

United StatesHybridFull-timeManager Level5+ yrs exp

H-1B verified · 2310 LCAs

Apply now

Top focus

Privacy OfficerSecurity EngineerSecurity Architect

Amazon's Security & Privacy Regulatory Enablement (SPRe) team is the regulatory enablement engine for Amazon's security, privacy
AI compliance assurance needs. We take any new regulatory requirement from initial publication to demonstrated compliance across three domains — Security, Privacy
AI — using a repeatable, scalable operating model (Anticipate → Enable → Assure). We are seeking an experienced Assurance Operations Lead to manage and scale the operational delivery of all external audits and regulatory examinations across SPRe's security, privacy
AI compliance domains. This is a people management role leading a team of assurance specialists across multiple jurisdictions (EU, UK, India, US, Singapore, Middle East), with responsibility for audit lifecycle management, operational excellence, team development
delivery metrics. The ideal candidate brings deep expertise in both information security and privacy compliance, has led audit/assurance teams at scale
can build a high-performing, geographically distributed team that delivers consistently across regulatory frameworks. You will be responsible for integrating security and privacy assurance functions under a unified operating rhythm — driving cross-domain efficiency, developing talent
ensuring Amazon demonstrates compliance to regulators, auditors
supervisory authorities globally. Key job responsibilities Audit & Assurance Delivery (Gear 3: Assure) Own operational delivery of all external audits and regulatory examinations across payments security, privacy (DMA, DSA, GDPR, CCPA, COPPA, DPDP)
emerging AI regulations. Manage the full external audit lifecycle from planning through to report issuance across all regulated entities globally Front-end external auditors and regulatory examiners as the senior operational point of contact Coordinate evidence collection, collation
presentation — ensuring audit-readiness and delivery excellence Manage audit findings, remediation tracking
formal closure across all domains Establish and track operational metrics for assurance delivery — audit cycle times, finding closure rates, evidence readiness
quality benchmarks Strategic & Cross-Domain Leadership Drive methodology consistency across security and privacy assurance — identifying cross-domain synergies, shared control frameworks
efficiency opportunities Own the go/no-go decision process for external examinations, ensuring leadership retains oversight of the external audit relationship Maintain C-level relationships with external auditors, regulators
supervisory authorities Influence Security and Privacy Control Assessment automation efforts to achieve compliance at scale Communicate audit posture, risks
programme health to executive leadership — escalating critical issues with precision and driving timely resolution Contribute to SPRe's strategic roadmap including expansion into RAI (Responsible AI) assurance as regulatory frameworks mature People Leadership & Team Development Lead, manage
develop a team of assurance specialists spanning security and privacy domains across multiple geographies Build a high-performing, cohesive team culture that integrates previously separate security and privacy assurance functions under a unified operating model Drive career development, performance management
succession planning — identifying and developing the next generation of assurance leaders Establish team operating rhythm including regular syncs, shared dashboards, clear ownership by jurisdiction or programme
delivery metrics Attract, hire
retain top assurance talent across both security and privacy disciplines About the team SPRe operates through three interconnected gears forming a continuous flywheel: **Anticipate** (regulatory engagement and horizon scanning), **Enable** (programme design and regulatory compliance monitoring)
**Assure** (external audit delivery and regulatory examination management). This role leads the Assure function — the execution engine that demonstrates Amazon's compliance to the outside world. Team members include security compliance specialists, privacy assurance specialists
cross-domain flex resources operating across India, Europe
the US. You will report to SPRe's Senior Manager and work closely with the Programme Enablement pillar, Legal, Technology
Business teams across Amazon. Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path
includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations
physical stores. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives
voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training
other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home
is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve.
Bachelor's degree or equivalent in Computer Science, Information Systems Management, International Relations, Engineering
other related fields - Experience communicating and presenting to senior leadership - Experience managing multiple projects and priorities across teams in a fast-paced, deadline-driven environment - 10+ years of experience in compliance, regulatory assurance, audit, governance
risk management — with meaningful depth in both information security and privacy/data protection domains - Experience building and scaling compliance/assurance functions, integrating teams
driving operational excellence across multiple regulatory frameworks simultaneously - Experience managing audit programmes across multiple jurisdictions with different regulatory regimes - Experience with security and privacy principles — risk-based thinking, control design, defence in depth, data protection by design
Experience in process improvement - Experience leading assurance/audit teams that span both information security and privacy — demonstrating cross-domain operational leadership - Professional auditing qualifications or relevant certifications (CISA, CISM, CISSP, CIPP/E, CIPP/US, CIPM, QSA, ISO 27001 Lead Auditor
similar) - Experience managing compliance programmes for major technology companies or regulated entities - Experience with payment industry regulations and supervisory authorities across multiple jurisdictions - Knowledge of AI governance frameworks (EU AI Act, NIST AI RMF) and ability to stand up new assurance programmes for emerging regulatory domains - Experience with GRC platforms, audit management tools
automation of evidence collection at scale Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability
other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications
location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off
parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, NY, New York - 171,800.00 - 300,700.00 USD annually

Required skills

auditcomplianceinformation securityprivacyteam management