Security Compliance Manager — Continuous GRC & AI tooling

Amazon Inc.; Austin (TX); On-site; USD 131,000 - 230,000; Full time

Benefits offered by this job

Health insurance

401(k) matching

Paid time off

Parental leave

Job summary

Amazon.com Services LLC is seeking a Security Industry Specialist Manager to lead a team delivering and maintaining certifications (SOC 2, PCI DSS, ISO 27001, HIPAA) across a growing service landscape. You will own the full audit lifecycle, manage auditors, and drive continuous compliance with AI/GRC investments.

You will report to senior leaders, influence scale across stores, and partner with Sales, Legal, and engineering to accelerate secure deal cycles while building customer trust.

Qualifications

• Bachelor's degree in Auditing, Information Systems Management, Computer Science, Cyber Security, or related fields.
• 7+ years of information security compliance, audit, governance, or risk management with deep expertise in SOC 2, ISO, HIPAA, PCI.
• 3+ years of people management across multiple time zones.
• Demonstrated experience owning end-to-end external audit delivery — managing auditors, regulators, or equivalents.
• Strong security principles: risk-based thinking, control design, defense in depth, least privilege, preventative vs detective controls.

Responsibilities

• Own end-to-end delivery of a portfolio of industry certification and compliance programs (SOC 2, PCI DSS, ISO 27001, Cyber Essentials, HIPAA, risk assessments).
• Lead audit lifecycle activities: evidence collection strategy, auditor relationships, remediation of gaps.
• Manage, coach, and develop a team of Security Industry Specialists across multiple time zones.
• Drive adoption of GRC tooling and automation for evidence collection, control testing, and audit readiness.
• Support sales by leading security discussions with Sales, Legal, and other stakeholders; maintain trust documentation.

Skills

Leadership

Auditing

Security governance

Risk management

External audit management

Education

Bachelor's degree in Auditing, Information Systems Management, Computer Science, Cyber Security, or related fields

Tools

GRC platforms

Audit management tools

Job description

Amazon.com Services LLC is seeking a Security Industry Specialist Manager to lead a team delivering and maintaining certifications (SOC 2, PCI DSS, ISO 27001, HIPAA) across a growing service landscape. You will own the full audit lifecycle, manage auditors, and drive continuous compliance with AI/GRC investments.

You will report to senior leaders, influence scale across stores, and partner with Sales, Legal, and engineering to accelerate secure deal cycles while building customer trust.