Apply on Employer Site

Amazon · 1 day ago

Technical Program Manager, Leo Security

Arlington, VA

Full-time

Onsite

Mid, Senior Level

$114K/yr - $198K/yr

5+ years exp

Amazon is a leading company in the technology sector, and they are seeking a Technical Program Manager for their Leo Security Assurance team. The role involves managing the implementation of Governance, Risk, and Compliance (GRC) tooling, ensuring alignment with security and compliance requirements while fostering cross-functional collaboration.

Artificial Intelligence (AI)DeliveryE-CommerceRetail

No H1B

U.S. Citizen Only

Responsibilities

Own and deliver the end-to-end roadmap for GRC tool implementation, ensuring all releases align with Leo Security Assurance’s long-term audit, compliance, and risk management outcomes

Lead multi-workstream program planning and execution, including scope definition, prioritization, timelines, risk mitigation, and status reporting for engineering and business stakeholders

Drive requirements gathering across compliance, audit, and security teams, ensuring requirements are clear, complete, and validated before engineering begins implementation

Partner closely with software engineers to translate compliance/control requirements into actionable technical specifications and ensure high-quality, secure delivery

Coordinate integration with AWS GRC platform teams and internal platform or infrastructure teams, managing dependencies and ensuring seamless technical alignment

Ensure the GRC tools support key compliance frameworks (e.g., SOC, SOX, ISO, FedRAMP, internal controls) and continuously refine features to meet evolving audit needs

Proactively identify and manage risks, issues, and program blockers, driving timely decisions and escalations to maintain delivery momentum

Lead process improvement and automation initiatives, leveraging the GRC platform to reduce manual work, improve evidence collection, and increase operational efficiency

Provide clear, data-driven communication to senior leadership, including program status, risks, decisions needed, and measurable impact on security assurance outcomes

Foster strong cross-functional relationships across engineering, compliance, legal, security, and AWS teams to ensure consistent alignment and successful delivery of the GRC roadmap

Qualification

GovernanceRiskComplianceSoftware DevelopmentProject ManagementCloud ArchitectureAWS CertificationSystems DesignProcess ImprovementRisk ManagementIncident ResponseCross-functional Coordination