Role at a glance
- Job function
-
Product, Strategy & Operations Product Management & Product Ownership
- Salary
- Not Disclosed
- Location
- Seattle, Washington, United States
- Work arrangement
- On-site
- Education
- Bachelor's
Spotted an issue?
We’ll check it against the original posting.
Qualifications
Required
- Bachelor's degree
- 7+ years of hands-on experience in audit, compliance, or risk management — conducting audits, managing compliance programs, implementing GRC frameworks (SOC 2, ISO 27001, PCI-DSS, HIPAA, NIST CSF, FedRAMP), or leading enterprise GRC...
- 3+ years of product management or product strategy experience (or demonstrated trajectory into product roles)
- Deep practitioner knowledge of audit workflows, evidence collection, control testing, and remediation processes
- Experience with enterprise SaaS tools in the GRC space (as a user, buyer, or implementer)
- Strong written communication skills with experience authoring strategy documents for senior leadership
Preferred
- Experience transitioning from a domain expert role (auditor, compliance lead, GRC consultant) into product management
- CISA, CISSP, CRISC, CISM, or equivalent professional certifications
- Experience evaluating, selecting, or implementing GRC platforms for enterprise organizations
- Familiarity with audit management workflows at GRC firms or enterprise internal audit teams
- Experience with AI/ML-powered product features, particularly applied to document analysis, evidence automation, or policy enforcement
- Understanding of cloud security and governance concepts (resource configuration management, identity and access, security posture management)
About the role
Original posting provided by amazon
Are you passionate about helping organizations manage governance, risk, and compliance (GRC) at cloud scale? AWS is building a new AI-powered GRC service that delivers continuous compliance, real-time risk quantification, and governance for AI agent workloads. We are seeking a Senior Product Manager – Technical (PMT) to own and drive critical product areas as we scale this service for enterprise adoption.
About the Opportunity
The GRC market is $60B+ and undergoing a fundamental transformation. Point-in-time audits are becoming untenable as enterprises operate across multi-cloud and hybrid environments that change daily. AI agents are proliferating faster than compliance programs can adapt. No incumbent GRC vendor has a credible solution for continuous, AI-native governance. AWS is uniquely positioned to win here — and we're building the team to make it happen.
In this role, you will own the product strategy, roadmap, requirements, and go-to-market for a core set of capabilities within a new cloud-native GRC service. You will work backwards from enterprise GRC buyers — compliance officers, risk managers, CISOs, and audit teams — to define what we build and why. You will partner with engineering, science, UX, marketing, sales, and legal to deliver capabilities that win in a competitive and rapidly evolving market.
This is a high-ownership role. You will define the product vision for your area, author PRFAQs and requirements documents, make pricing and packaging decisions, and drive adoption post-launch. You will operate at the intersection of deep domain expertise in compliance/audit/risk and strong technical product management fundamentals.
Key job responsibilities
Leverage deep audit and compliance expertise — direct experience conducting, managing, or overseeing audits — to define product requirements that solve real practitioner pain points
Own the product strategy and roadmap for a core domain within a new AI-powered GRC service — from vision through delivery and adoption
Work backwards from enterprise GRC customers to define requirements, acceptance criteria, and prioritization
Author PRFAQs, pricing narratives, and requirements documents that align engineering execution with customer outcomes
Partner with engineering leads to make architecture tradeoffs, scope MVPs, and drive sprint-level execution through a multi-pod organization
Define and drive go-to-market strategy including positioning, sales enablement, customer onboarding, and partner ecosystem plays
Leverage deep domain knowledge of compliance standards (SOC 2, ISO 27001, PCI-DSS, HIPAA, NIST, EU AI Act), audit workflows, and risk management to inform product decisions
Analyze market trends, competitive landscape, and customer telemetry to identify opportunities and inform prioritization
Work cross-functionally with marketing, field sales, solution architects, professional services, and GSI partners to drive enterprise adoption
Represent the service in customer meetings, industry events, and executive reviews
Influence cross-AWS strategy by collaborating with adjacent governance and security teams to deliver integrated experiences
A day in the life
On a typical day, you might review customer feedback from a Fortune 500 enterprise, author a requirements for a new capability, meet with engineering to finalize scope for the next release train, join a customer call with a solution architect to understand an auditor's workflow, analyze service telemetry to identify adoption blockers, and sync with marketing on positioning for an upcoming industry event. You will work across time zones with a globally distributed team. The pace is fast, the problems are complex, and the opportunity is massive — you'll be defining a new category in cloud-native GRC.
- 7+ years of hands-on experience in audit, compliance, or risk management — conducting audits, managing compliance programs, implementing GRC frameworks (SOC 2, ISO 27001, PCI-DSS, HIPAA, NIST CSF, FedRAMP), or leading enterprise GRC functions
- 3+ years of product management or product strategy experience (or demonstrated trajectory into product roles)
- Deep practitioner knowledge of audit workflows, evidence collection, control testing, and remediation processes
- Experience with enterprise SaaS tools in the GRC space (as a user, buyer, or implementer)
- Strong written communication skills with experience authoring strategy documents for senior leadership
- CISA, CISSP, CRISC, CISM, or equivalent professional certifications
- Experience evaluating, selecting, or implementing GRC platforms for enterprise organizations
- Familiarity with audit management workflows at GRC firms or enterprise internal audit teams
- Experience with AI/ML-powered product features, particularly applied to document analysis, evidence automation, or policy enforcement
- Understanding of cloud security and governance concepts (resource configuration management, identity and access, security posture management)
Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.
Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.
USA, WA, Seattle - 151,200.00 - 204,600.00 USD annually
About the Opportunity
The GRC market is $60B+ and undergoing a fundamental transformation. Point-in-time audits are becoming untenable as enterprises operate across multi-cloud and hybrid environments that change daily. AI agents are proliferating faster than compliance programs can adapt. No incumbent GRC vendor has a credible solution for continuous, AI-native governance. AWS is uniquely positioned to win here — and we're building the team to make it happen.
In this role, you will own the product strategy, roadmap, requirements, and go-to-market for a core set of capabilities within a new cloud-native GRC service. You will work backwards from enterprise GRC buyers — compliance officers, risk managers, CISOs, and audit teams — to define what we build and why. You will partner with engineering, science, UX, marketing, sales, and legal to deliver capabilities that win in a competitive and rapidly evolving market.
This is a high-ownership role. You will define the product vision for your area, author PRFAQs and requirements documents, make pricing and packaging decisions, and drive adoption post-launch. You will operate at the intersection of deep domain expertise in compliance/audit/risk and strong technical product management fundamentals.
Key job responsibilities
Leverage deep audit and compliance expertise — direct experience conducting, managing, or overseeing audits — to define product requirements that solve real practitioner pain points
Own the product strategy and roadmap for a core domain within a new AI-powered GRC service — from vision through delivery and adoption
Work backwards from enterprise GRC customers to define requirements, acceptance criteria, and prioritization
Author PRFAQs, pricing narratives, and requirements documents that align engineering execution with customer outcomes
Partner with engineering leads to make architecture tradeoffs, scope MVPs, and drive sprint-level execution through a multi-pod organization
Define and drive go-to-market strategy including positioning, sales enablement, customer onboarding, and partner ecosystem plays
Leverage deep domain knowledge of compliance standards (SOC 2, ISO 27001, PCI-DSS, HIPAA, NIST, EU AI Act), audit workflows, and risk management to inform product decisions
Analyze market trends, competitive landscape, and customer telemetry to identify opportunities and inform prioritization
Work cross-functionally with marketing, field sales, solution architects, professional services, and GSI partners to drive enterprise adoption
Represent the service in customer meetings, industry events, and executive reviews
Influence cross-AWS strategy by collaborating with adjacent governance and security teams to deliver integrated experiences
A day in the life
On a typical day, you might review customer feedback from a Fortune 500 enterprise, author a requirements for a new capability, meet with engineering to finalize scope for the next release train, join a customer call with a solution architect to understand an auditor's workflow, analyze service telemetry to identify adoption blockers, and sync with marketing on positioning for an upcoming industry event. You will work across time zones with a globally distributed team. The pace is fast, the problems are complex, and the opportunity is massive — you'll be defining a new category in cloud-native GRC.
Basic Qualifications
- Bachelor's degree- 7+ years of hands-on experience in audit, compliance, or risk management — conducting audits, managing compliance programs, implementing GRC frameworks (SOC 2, ISO 27001, PCI-DSS, HIPAA, NIST CSF, FedRAMP), or leading enterprise GRC functions
- 3+ years of product management or product strategy experience (or demonstrated trajectory into product roles)
- Deep practitioner knowledge of audit workflows, evidence collection, control testing, and remediation processes
- Experience with enterprise SaaS tools in the GRC space (as a user, buyer, or implementer)
- Strong written communication skills with experience authoring strategy documents for senior leadership
Preferred Qualifications
- Experience transitioning from a domain expert role (auditor, compliance lead, GRC consultant) into product management- CISA, CISSP, CRISC, CISM, or equivalent professional certifications
- Experience evaluating, selecting, or implementing GRC platforms for enterprise organizations
- Familiarity with audit management workflows at GRC firms or enterprise internal audit teams
- Experience with AI/ML-powered product features, particularly applied to document analysis, evidence automation, or policy enforcement
- Understanding of cloud security and governance concepts (resource configuration management, identity and access, security posture management)
Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.
Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.
The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits.
USA, WA, Seattle - 151,200.00 - 204,600.00 USD annually
About the company
amazon
Large Enterprise
Amazon is a global leader in e-commerce and cloud computing, founded in 1994 by Jeff Bezos. Initially starting as an online bookstore, it has since expanded its offerings to include a vast range of products and services, including electronics, fashion, and digital content. With Amazon Web Services (AWS), the company also provides powerful cloud solutions to businesses around the world. Known for its innovation, customer-centric approach, and commitment to operational efficiency, Amazon continues to shape the future of retail and technology, consistently seeking new ways to enhance customer experiences.