Privacy Engineering Manager, Incident Response

Devices and Services Trust and Privacy (DSTP) is responsible for maintaining and raising the trust bar for Amazon customers across a diverse set of 30+ Devices and Services (D&S). DSTP offers horizontal services for builders to ensure trust, privacy, and accessibility is built into our products and services. We build customer-facing capabilities that provides customers with control and transparency and reducing privacy risk, while enabling partner teams to innovate with appropriate guardrails for content moderation, privacy, accessibility, and trust.

The DSTP team is seeking an experienced privacy and security engineering leader to join the Privacy Risk & Incident Management team. In this role, you will own building and managing a team of Incident Responders and technical leaders, fostering a strong team culture. You and your team will be expected to identify and prioritize privacy and trust risks across D&S; drive tracking, treatment, and reporting of these risks; and hold owners accountable for implementing solutions in appropriate time frames to mitigate risks. You will partner closely with our builders, legal, PR, marketing, security, and product, engineering, policy, and ops teams across DSTP to ensure a cohesive and comprehensive privacy incident response strategy for our devices and services.

We are looking for a leader that's highly passionate about privacy and security and building a high performing Incident Response team. Ideally you have a track record of delivering high-quality technology solutions and services in a hyper-growth environment where priorities shift quickly. You should know how to prioritize, communicate clearly and compellingly, and understand how to drive a high level of focus and excellence with a strong team. Devices & Services in general, and Privacy Incident Response in particular, operates at very large scale and demands high standards, so a passion and discipline around security/privacy and delivery is critical. A high level of ownership and accountability is a must.

Key job responsibilities
* Provide strategic leadership and direction for the privacy incident response engineering team to ensure effective and timely detection, response, and mitigation of privacy and trust incidents.
* Oversee the design, development, implementation, and maintenance of DSTS’ privacy incident response infrastructure, tools, and processes.
* Assess privacy risks, establish mitigation strategies, and work with our builders, stakeholders, partners, and peer teams to develop technical roadmaps for incident response capabilities.
* Build, lead, and develop a high-performing incident response security engineering team with the right mix of skills.
* Define Kingpin goals, provide coaching, and foster a culture of innovation and collaboration.
* Set and clarify requirements and expectations with your team, peers, and customers.
* Drive creation of mechanisms from a security, privacy, quality, and speed perspective that enable DSTP to scale.

A day in the life
This is an inherently cross-functional and organization-spanning role, where you will work with lawyers, business leaders, and engineers to identify problems, understand constraints and tradeoffs, and drive buy-in for technical solutions which integrate with, and improve, existing processes. You will pragmatically balance the need for short-term fixes with a long-term vision. You will write documents which clearly document the reasoning behind decisions, and raise the bar for your team around structured decision-making. You will dive deep to discover root causes and patterns, in order to propose new systems and tools. You will earn trust across the Devices & Services organization in order to drive operational and engineering excellence.

About the team
Trust Fundamentals (TrustFun), which is a part of DSTP, is a “horizontal” organization responsible for building technologies, programs, and services at Amazon scale that instill and grow customer trust, create mechanisms to confidently attain existing and ever-evolving regulatory objectives, and ensure the efficiency and effectiveness of our business partners and stakeholders to meet their trust obligations without disruption — in that order of priority. The scope of our organization is any solution, privacy policy and promise that is intended to be uniformly adopted and used across all D&S organizations, i.e., creating a fundamental trust platform that supports all of D&S. Our team is dedicated to supporting new members. We have a broad mix of job families, experience levels and tenures, and are building an environment that celebrates subject matter expertise, collaboration, knowledge sharing, and mentorship.