Sr. Product Manager - Technical, AWS Governance

Amazon; Seattle (WA); On-site; USD 151,000 - 205,000; Full time

Job summary

Amazon in Seattle, WA is seeking a Senior Product Manager – Technical for AWS’s new AI-powered GRC service. You will own strategy, roadmap, and go-to-market for core capabilities, partnering with engineering, UX, marketing, and legal to deliver value to enterprise compliance teams.

You're expected to leverage deep audit and risk management expertise, define requirements and acceptance criteria, and influence architecture while driving multi-pod execution and enterprise adoption across time zones.

Qualifications

• 7+ years in audit, compliance, or risk management — including audits, programs, or GRC frameworks
• 3+ years in product management or strategy roles
• Deep practitioner knowledge of audit workflows, evidence collection, controls testing, and remediation

Responsibilities

• Define product strategy, roadmap, and go-to-market for a core domain in a new AI-powered GRC service
• Capture customer requirements from enterprise GRC buyers and translate into clear requirements and acceptance criteria
• Author PRFAQs, pricing narratives, and requirements documents aligning engineering with outcomes
• Partner with engineering leads to scope MVPs and drive execution across multiple pods
• Define and drive go-to-market strategy including positioning, enablement, onboarding, and partner ecosystem

Skills

GRC domain expertise

Audit workflows & controls

Enterprise SaaS experience

Written comm. for leadership

Education

Bachelor's degree

Job description

Description

Are you passionate about helping organizations manage governance, risk, and compliance (GRC) at cloud scale? AWS is building a new AI-powered GRC service that delivers continuous compliance, real-time risk quantification, and governance for AI agent workloads. We are seeking a Senior Product Manager – Technical (PMT) to own and drive critical product areas as we scale this service for enterprise adoption.

About the Opportunity

The GRC market is $60B+ and undergoing a fundamental transformation. Point-in-time audits are becoming untenable as enterprises operate across multi-cloud and hybrid environments that change daily. AI agents are proliferating faster than compliance programs can adapt. No incumbent GRC vendor has a credible solution for continuous, AI-native governance. AWS is uniquely positioned to win here — and we're building the team to make it happen.

In this role, you will own the product strategy, roadmap, requirements, and go-to-market for a core set of capabilities within a new cloud-native GRC service. You will work backwards from enterprise GRC buyers — compliance officers, risk managers, CISOs, and audit teams — to define what we build and why. You will partner with engineering, science, UX, marketing, sales, and legal to deliver capabilities that win in a competitive and rapidly evolving market.

This is a high-ownership role. You will define the product vision for your area, author PRFAQs and requirements documents, make pricing and packaging decisions, and drive adoption post-launch. You will operate at the intersection of deep domain expertise in compliance/audit/risk and strong technical product management fundamentals.

Key job responsibilities

• Leverage deep audit and compliance expertise — direct experience conducting, managing, or overseeing audits — to define product requirements that solve real practitioner pain points

• Own the product strategy and roadmap for a core domain within a new AI-powered GRC service — from vision through delivery and adoption

• Work backwards from enterprise GRC customers to define requirements, acceptance criteria, and prioritization

• Author PRFAQs, pricing narratives, and requirements documents that align engineering execution with customer outcomes

• Partner with engineering leads to make architecture tradeoffs, scope MVPs, and drive sprint-level execution through a multi-pod organization

• Define and drive go-to-market strategy including positioning, sales enablement, customer onboarding, and partner ecosystem plays

• Leverage deep domain knowledge of compliance standards (SOC 2, ISO 27001, PCI-DSS, HIPAA, NIST, EU AI Act), audit workflows, and risk management to inform product decisions

• Analyze market trends, competitive landscape, and customer telemetry to identify opportunities and inform prioritization

• Work cross-functionally with marketing, field sales, solution architects, professional services, and GSI partners to drive enterprise adoption

• Represent the service in customer meetings, industry events, and executive reviews

• Influence cross-AWS strategy by collaborating with adjacent governance and security teams to deliver integrated experiences

A day in the life

On a typical day, you might review customer feedback from a Fortune 500 enterprise, author a requirements for a new capability, meet with engineering to finalize scope for the next release train, join a customer call with a solution architect to understand an auditor's workflow, analyze service telemetry to identify adoption blockers, and sync with marketing on positioning for an upcoming industry event. You will work across time zones with a globally distributed team. The pace is fast, the problems are complex, and the opportunity is massive — you'll be defining a new category in cloud-native GRC.

Basic Qualifications

• Bachelor's degree

• 7+ years of hands-on experience in audit, compliance, or risk management — conducting audits, managing compliance programs, implementing GRC frameworks (SOC 2, ISO 27001, PCI-DSS, HIPAA, NIST CSF, FedRAMP), or leading enterprise GRC functions

• 3+ years of product management or product strategy experience (or demonstrated trajectory into product roles)

• Deep practitioner knowledge of audit workflows, evidence collection, control testing, and remediation processes

• Experience with enterprise SaaS tools in the GRC space (as a user, buyer, or implementer)

• Strong written communication skills with experience authoring strategy documents for senior leadership

Preferred Qualifications

• Experience transitioning from a domain expert role (auditor, compliance lead, GRC consultant) into product management

• CISA, CISSP, CRISC, CISM, or equivalent professional certifications

• Experience evaluating, selecting, or implementing GRC platforms for enterprise organizations

• Familiarity with audit management workflows at GRC firms or enterprise internal audit teams

• Experience with AI/ML-powered product features, particularly applied to document analysis, evidence automation, or policy enforcement

• Understanding of cloud security and governance concepts (resource configuration management, identity and access, security posture management)

Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.

The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits .

USA, WA, Seattle - 151,200.00 - 204,600.00 USD annually