Security Compliance Lead: Continuous Assurance AI-Driven GRC

Amazon Inc.; Austin (TX); On-site; USD 131,000 - 230,000; Full time

Benefits offered by this job

RSUs

Health insurance

401(k) matching

Job summary

Amazon is seeking a Security Compliance Manager to lead a team delivering and maintaining industry certifications (SOC 2, PCI DSS, ISO 27001, HIPAA) across diverse services. You will own the full audit lifecycle, manage auditors, and drive continuous compliance through automation and GRC tooling.

You will influence strategic investment in AI and scalable controls, with regular reporting to senior leaders and collaboration across Sales, Legal, and Engineering to accelerate secure growth.

Qualifications

• Bachelor's degree in Auditing, Information Systems Management, Cyber Security, or related fields.
• 7+ years of information security compliance, audit, governance, or risk management with deep expertise in SOC 2, ISO, HIPAA, PCI.
• 3+ years of people management experience, leading teams across time zones.
• Experience owning end-to-end external audit delivery with auditors or regulatory examiners.
• Strong skills in risk-based thinking, control design, defense in depth, least privilege access.

Responsibilities

• Own end-to-end delivery of a portfolio of certification and compliance programs (SOC 2, PCI DSS, ISO 27001, Cyber Essentials, HIPAA).
• Lead audit lifecycle activities including evidence collection strategy, auditor relationship management, and remediation of findings.
• Manage and develop a team of security industry specialists across multiple time zones.
• Drive automation of evidence collection, control testing, and audit readiness through GRC tooling.

Skills

Audit management

People management

Security frameworks

Risk management

Data-driven decisions

GRC tooling

AI governance

Education

Bachelor's degree in related field

Tools

GRC platforms

Audit management tools

Automation tools

Job description

Amazon is seeking a Security Compliance Manager to lead a team delivering and maintaining industry certifications (SOC 2, PCI DSS, ISO 27001, HIPAA) across diverse services. You will own the full audit lifecycle, manage auditors, and drive continuous compliance through automation and GRC tooling.

You will influence strategic investment in AI and scalable controls, with regular reporting to senior leaders and collaboration across Sales, Legal, and Engineering to accelerate secure growth.