Privacy Associate, Workplace Trust: Privacy, AI, and Risk

Come build the future of privacy with us! To get there, we need exceptionally talented, bright, and driven people. We work in a fast-paced environment across multiple industries, never losing our passion for customers.

As a member of the Workplace Trust: Privacy, AI, and Risk team, you will play a key role in operationalizing privacy across Amazon’s global employee, candidate, and contingent worker populations. This includes engaging with multiple stakeholders across the enterprise to help ensure compliant outcomes. You will be responsible for consulting with key stakeholders to drive alignment with global privacy regulatory requirements, including CPRA and GDPR.

In the execution of Amazon’s global privacy obligations, you will rely heavily on your case management, analytical, and relationship building skills to develop and deploy innovative strategies for data protection. The identified candidate will demonstrate proven experience to: support diverse stakeholders; understand levels of potential risks and how to address them; provide consultation; and have the ability to synthesize diverse data to identify patterns, draw conclusions, and prioritize remediation efforts using risk management concepts. Excellent writing skills are required as the output for this role will be documentation that aligns to privacy regulations worldwide.

The ‘day-to-day’ aspect of this role will be to review internal Amazon systems for compliance with global privacy obligations. As part of this you will provide proactive guidance for upcoming tech builds and roadmaps, work with leaders on acceptable business risk when applicable, and track remediation actions as needed. You will be responsible for learning the privacy risks of systems, and ensure the system owners follow the correct paths to full compliance. After reviewing each system, you will be responsible for creating a Data Protection Impact Assessment (DPIA) and Record of Processing (RoP) for regulatory need.


Key job responsibilities
* Consult with legal, finance, benefits, IT, information security, and HR policy, process, vendor, and application owners to ensure that sound protocols are in place to mitigate privacy risks.
* Monitor known and emerging risks, measure internal control effectiveness, and develop and own action items to remediate identified risk issues.
* Socialize and secure commitment for remediation and risk management strategies.
* Develop knowledge of employee privacy obligations and data privacy processes and solutions utilized by Amazon.
* Assess areas for privacy program improvement and implement solutions.
* Draft written narratives to communicate obligations, risk analyses, and recommendations.
* Inventory risk and compliance obligations in a governance, risk and compliance (GRC) system framework.
* Prepare other supporting documentation such as manager and employee communications, FAQs, and standard operating processes.
* Respond to questions and troubleshoot issues.
* Manage other risk and compliance related projects, as needed, to systematically reduce privacy risks.