Principal Risk Manager, Privacy, WW SPS Tech PMO

Amazon's Seller Privacy Program is seeking a Principal Risk Manager to lead centralized privacy strategy and compliance across Worldwide Selling Partner Services (SPS). In this role, you will serve as the single-threaded owner of Seller privacy compliance spanning hundreds of applications across 5+ VP organizations, driving long-term strategy and near-term execution to protect Sellers' data rights under GDPR, CCPA, and emerging global regulations.

You will operate at the intersection of regulatory risk, technical systems, and business priorities — defining the privacy roadmap, resolving organizational ambiguity, and influencing cross-VP decision-making without direct authority. This is a high-judgment, high-impact role where the business problem, solution, and risk strategy are often undefined, and you will be expected to create clarity, build mechanisms, and drive results at scale. You will write strategic documents for VP audiences, lead escalations up to VP level, and represent Sellers in Amazon-wide privacy decisions. If you thrive in ambiguity, can influence at the highest levels, and want to protect Sellers' data rights — we want to talk to you.

Key job responsibilities
- Own SPS Privacy strategy, priorities, mechanisms, and execution across all Seller data processing activities worldwide
- Drive compliance with GDPR, CCPA, and emerging privacy regulations across hundreds of SPS applications
- Influence 5+ VP organizations to prioritize privacy investments, navigating tension between Seller experience, legal requirements, and competing business priorities
- Resolve organizational ambiguity and ownership gaps requiring Director/VP alignment across multiple technical and business teams
- Lead strategic escalations to VP/SVP leadership with high-quality written documents informing risk exposure and compliance posture
- Define and own annual privacy goals, including
- Data Subject Access Requests (DSAR), Account Closure and Data Deletion (ACDDR), and automation coverage targets
- Partner with Amazon Privacy, Legal, and Privacy Bar Raisers to define obligations and influence tooling roadmaps
- Monitor emerging regulatory enforcement actions and proactively de-risk the business
- Make high-judgment trade-offs between compliance deadlines, business opportunity, and resource constraints in a historically under-invested domain

A day in the life
You might start your day checking goal progress across your privacy portfolio, then shift to authoring a VP-level status update on compliance posture. Mid-morning, you're drafting a cycle planning document that frames trade-offs between a compliance deadline and competing business goals, or writing an escalation document to unblock a critical dependency. After lunch, you're influencing cross-functional stakeholders — Engineering, Legal, Product — to achieve delivery commitments and keep priorities on track. By end of day, you're reporting progress to VP audiences, reviewing communications for accuracy and strategic framing, and identifying what needs to escalate versus what you can solve through your network. No two days are alike, and the problems are rarely pre-defined.
About the team
The SPS Tech PMO's Privacy Program drives centralized, scalable privacy strategy for Amazon's Selling Partner Services. We partner with Amazon Privacy, Legal, and engineering teams across the company to ensure Seller data rights are met, risks are mitigated, and compliance is maintained across a complex landscape of hundreds of applications. Our team operates with a bias for action, high ownership, and a belief that privacy is a fundamental priority for the business. We value clear thinkers who can turn ambiguity into mechanisms and influence into outcomes.

About the team
The SPS Tech PMO's Privacy Program drives centralized, scalable privacy strategy for Amazon's Selling Partner Services. We partner with Amazon Privacy, Legal, and engineering teams across the company to ensure Seller data rights are met, risks are mitigated, and compliance is maintained across a complex landscape of hundreds of applications. Our team operates with a bias for action, high ownership, and a belief that privacy is a fundamental priority for the business. We value clear thinkers who can turn ambiguity into mechanisms and influence into outcomes. - Bachelor's degree or equivalent in Risk Management, Business Administration, Security Management, or a related field
- 10+ years of risk management, audit, legal, compliance, operations, or a similar discipline experience
- Experience working cross-functionally with tech and non-tech teams
- Experience using data and metrics to back up assumptions and develop business cases
- Experience with cross functional project or program delivery
- 8+ years of communicating with and presenting to executive and senior audiences experience
- Experience in Privacy Law
- Experience communicating with customers, technical, regulatory, business teams, and management to collect requirements, describe product features, and technical designs - Experience with data privacy operations including Data Subject Access Requests (DSAR) and data deletion/retention frameworks
- CIPP/E, CIPP/US, CIPM, or other recognized privacy certification
- Experience with privacy-by-design principles and their application in large-scale technology environments
- Experience managing regulatory escalations involving Data Protection Authorities (e.g., ICO, EU DPAs)
- Familiarity with Amazon's development lifecycle and data management systems

Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.

Los Angeles County applicants: Job duties for this position include: work safely and cooperatively with other employees, supervisors, and staff; adhere to standards of excellence despite stressful conditions; communicate effectively and respectfully with employees, supervisors, and staff to ensure exceptional customer service; and follow all federal, state, and local laws and Company policies. Criminal history may have a direct, adverse, and negative relationship with some of the material job duties of this position. These include the duties and responsibilities listed above, as well as the abilities to adhere to company policies, exercise sound judgment, effectively manage stress and work safely and respectfully with others, exhibit trustworthiness and professionalism, and safeguard business operations and the Company’s reputation. Pursuant to the Los Angeles County Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.

The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits.

USA, CA, San Diego - 144,200.00 - 195,000.00 USD annually
USA, WA, Seattle - 144,200.00 - 195,000.00 USD annually