Global Compliance & Enablement Risk Manager

Amazon; Madrid; On-site; EUR 90,000 - 130,000; Full time

Job summary

Amazon is seeking a Risk Manager for the ISOC within Worldwide Operations Security. You will build the compliance backbone, coordinate vendor contracts, and drive governance frameworks to ensure lawful and scalable monitoring operations across jurisdictions. This role emphasizes enablement rather than direct incident handling.

You will develop training curricula, SOPs, and audit frameworks while partnering with legal and platform teams to deploy standardized solutions globally.

Qualifications

• Bachelor's degree or equivalent.
• Experience overseeing security operations and working with security vendors/contractors.
• Experience in written and verbal communication with executives and non-technical leaders.
• Experience with multi-jurisdictional regulatory compliance including data protection.
• Ability to build and maintain training programs, SOPs, or certification frameworks.

Responsibilities

• Own regulatory and compliance management for ISOC monitoring operations across all international jurisdictions.
• Navigate legal frameworks for remote monitoring and cross-border data transfer, translating requirements into procedures.
• Manage vendor contracts for third party monitoring operators, including SLA definition and renewal planning.
• Coordinate technology integration across the monitoring platform and platform standardization.
• Develop and maintain the training and certification program for ISOC analysts.

Skills

Regulatory compliance

Vendor management

Training program design

Documentation & SOPs

Executive communication

Education

Bachelor's degree or equivalent

Tools

Security platforms

Job description

Amazon is seeking a Risk Manager for the ISOC within Worldwide Operations Security. You will build the compliance backbone, coordinate vendor contracts, and drive governance frameworks to ensure lawful and scalable monitoring operations across jurisdictions. This role emphasizes enablement rather than direct incident handling.

You will develop training curricula, SOPs, and audit frameworks while partnering with legal and platform teams to deploy standardized solutions globally.