GRC Security & Compliance Lead

Amazon; Redmond (WA); On-site; USD 102,000 - 178,000; Full time

Benefits offered by this job

Health insurance

RSUs and incentive programs

Paid time off

Job summary

Amazon is seeking an individual contributor for Governance, Risk and Compliance to design scalable controls across security and privacy requirements. You will drive certifications (ISO 27001, SOC 2, NIST), coordinate with auditors, and liaise with security teams and regulators.

This role sits at the Leo program with Arlington, VA or Redmond, WA locations. You will engage with engineering, compliance, bizdev and Legal to define solutions and translate cross-functional needs into actionable

Qualifications

• 3+ years in governance, risk and compliance designing controls or auditing ISO27001/NIST 800-53/SOC frameworks.
• Experience with ISO 27001, SOC 2, GDPR/CCPA and related security programs.

Responsibilities

• Design scalable GRC processes to meet security and privacy requirements.
• Develop and drive certifications like ISO 27001, SOC 2, GDPR; remediate gaps.
• Coordinate with external auditors and internal teams to ensure program maturity.
• Report on controls, audit results and risk metrics to leadership.

Skills

GRC program design

Audit coordination

Communication with stakeholders

Regulatory & contractual security

Education

Bachelor's degree

Job description

Amazon is seeking an individual contributor for Governance, Risk and Compliance to design scalable controls across security and privacy requirements. You will drive certifications (ISO 27001, SOC 2, NIST), coordinate with auditors, and liaise with security teams and regulators.

This role sits at the Leo program with Arlington, VA or Redmond, WA locations. You will engage with engineering, compliance, bizdev and Legal to define solutions and translate cross-functional needs into actionable