Privacy Compliance Specialist II, Data Governance and Privacy Compliance

The Amazon Devices & Services group delivers delightfully unique Amazon experiences. Starting with the best-selling Kindle family of products, we continue to produce groundbreaking devices like Fire TV, Fire tablets, Kuiper, Ring, Alexa, and services like Luna and Amazon Kids.

The Data Governance and Privacy Compliance team supports these business teams to enable growth and drive innovation while adhering to privacy requirements and controls that help protect customer privacy.

We are looking for a customer-obsessed person who is passionate about privacy. You will deep dive into privacy compliance issues across multiple business lines and work with internal stakeholders to ensure privacy requirements are promptly addressed.

If you are interested in enabling exceptional privacy and data management standards for customers, energized by a fast-paced and evolving environment, can deal with ambiguity, thrive at working independently and efficiently to address issues for internal stakeholders, and enjoy improving the processes you are a part of, this role may be a fit for you.

Key job responsibilities

• Conduct privacy compliance reviews and make determinations related to DSAR, Deletion, and Retention for a wide range of technical products, devices, and services.
• Identify privacy related issues and effectively manage escalation and exception processes, including communication to leadership as needed.
• Develop, improve, and maintain procedures and SOPs used by privacy reviewers.
• Work with stakeholders such as privacy, legal, policy, and engineering teams to ensure sound protocols are in place to manage evolving privacy obligations.
• Contribute to improvements to privacy review processes, mechanisms, and tooling.
• Assist in maintaining other privacy-focused documentation including procedures and internal runbooks.
• Support complex cross-functional projects to address emerging global privacy obligations.

A day in the life

The day-to-day’ aspect of this role will working with engineering and service teams to review Amazon Devices and Services for compliance with global privacy obligations related to DSAR, deletion, retention, and other privacy policies.

You will be responsible for working to help identify and resolve issues around how data is used, retained, and returned to customers.

Additionally, you will spend time working to develop mechanisms for ensuring a consistent privacy experience through work with partner teams and across the broader Amazon environment.

About the team

• Inclusive culture : Join a fun team that works in a complex, ever-changing space.
• Impact : Our work covers numerous devices and services that Amazon delivers to customers and enables teams to constantly raise the bar for privacy.
• Distributed : Our core sites are Seattle / Bellevue, Sunnyvale, Los Angeles, Boston, and Arlington, VA.
• Always learning : We’re always looking for opportunities to get better at what we do, and we’re looking for someone to bring their expertise to broaden our horizons.

BASIC QUALIFICATIONS

• 3+ years of experience in an information security, privacy, compliance, risk management role or role with comparable experience.
• Bachelor’s degree or relevant work experience.

PREFERRED QUALIFICATIONS

• 4+ years of experience in an information security, privacy, compliance, risk management role or role with comparable experience in or working closely with technology industry.
• 3+ years of experience working in a global, large-scale, complex, and fast-paced environment.
• Experience communicating with a wide range of internal stakeholders.
• Experience assessing risk and compliance against internal policies and procedures.
• Excellent written and verbal communication skills.
• Relevant privacy certifications (CIPP-US, CIPP-EU, CIPM, CIPT).
• Experience working with world-wide regulatory requirements for privacy and mitigate privacy risks.
• Proven analytical capabilities; experience with developing reports, metrics, and reporting mechanisms
• Experience communicating effectively with engineering and technical stakeholders.
• Experience working in an internal customer facing role, effectively supporting multiple projects simultaneously.
• Experience with GDPR, CCPA, and other privacy regulations.
3 days ago