build mechanisms to collect voice of customers and continuous feedback loops with key stakeholders
lead and mature dst's operational rhythm: mbrs/qbrs, flash reporting, wbr metrics, goal tracking, and executive-level reviews that provide visibility into security posture, integration progress, and risk burn-down
drive regular program reviews and status updates with key stakeholders
serve as the process owner and drive dst rhythm of business operations
champion dst's tenets across all engagements by systematically feeding field learnings and insights back into storessec, stores-bst, and core security partner teams to drive prioritization of compensating controls and raise the broader security bar
own cross-charter program strategy and roadmaps, ensuring alignment between pillars and identifying opportunities where work in one charter (e.g., m&a findings) informs and accelerates another (e.g., strike prioritization or dsi initiatives)
drive security integration programs end-to-end by coordinating across 10+ security workstreams (vmr, sirt, application security, third-party security, iam, conduit, bug bounty, and more) as sdo's single-threaded owner for post-close security integration
guide dsi initiatives that address security gaps in differentiated environments, developing compensating controls with defined transition plans to long-term owners
influence automation roadmaps in partnership with engineering, leveraging automation to reduce m&a onboarding timelines, accelerate security visibility, eliminate manual toil, and scale observability across differentiated environments
build and maintain strong partnerships with customer stakeholders (acquired bus, self-service bus) and partner security teams (acqsec, vmr, sirt, appsec, tps, bsts), ensuring feedback loops are closed and dependencies are managed
identify and escalate risks to senior leadership, manage vendor agreements, and influence cross-organizational resource allocation to ensure timely risk reduction
drive continuous improvement through retrospectives, lessons learned, and mechanism creation-ensuring dst's processes scale as the team's charter expands
mentor and develop tpms and program managers on the team, raising the bar on operational rigor, technical depth, and customer empathy
Additional Information
The Differentiated Security Team (DST) within Stores Security (StoresSec) Business Security Teams (Stores BST) is seeking a Principal Technical Program Manager to join the DST Leadership Team (DST-LT) and drive program maturity, operational excellence, and strategic evolution across all four of DST's charters:
- Merger & Acquisition (M&A) Security Integration across Amazon WW Stores, Devices and Other (SDO) lines of business
- Security Targeted Research, Insights & Key Engagements (STRIKE), providing time-bound security services to select business units
- Differentiated Security Initiatives (DSI)
- Automation & Tooling Development
DST partners with newly-acquired and existing Amazon Business Units to reduce risk by securing non-standard technologies where Amazon's paved-path solutions don't apply. As a member of the DST-LT, this Principal TPM will be instrumental in driving the team's tenets, particularly closing the loop by feeding field insights back into StoresSec and core security partner teams to improve the broader security ecosystem and continuously raise the security bar. You will lead cross-charter program strategy, establish and mature operational mechanisms, and ensure every engagement leaves business units more secure and self-sufficient with clear ownership and no ambiguity about accountability.
This role requires deep technical judgment to navigate complex security architectures across differentiated environments, the ability to operate with high ambiguity across acquired subsidiaries with diverse technology stacks, and the leadership presence to influence senior stakeholders (VPs/SVPs) on security trade-offs and resource prioritization.
Key job responsibilities
- Aligning security and service strategy with Amazon Security (AmSec) objectives and working backwards to reduce deviations from standard practices and requirements
- Build mechanisms to collect voice of customers and continuous feedback loops with key stakeholders
- Lead and mature DST's operational rhythm: MBRs/QBRs, flash reporting, WBR metrics, goal tracking, and executive-level reviews that provide visibility into security posture, integration progress, and risk burn-down
- Drive regular program reviews and status updates with key stakeholders
- Serve as the process owner and drive DST rhythm of business operations
- Champion DST's tenets across all engagements by systematically feeding field learnings and insights back into StoresSec, Stores-BST, and core security partner teams to drive prioritization of compensating controls and raise the broader security bar
- Own cross-charter program strategy and roadmaps, ensuring alignment between pillars and identifying opportunities where work in one charter (e.g., M&A findings) informs and accelerates another (e.g., STRIKE prioritization or DSI initiatives)
- Drive security integration programs end-to-end by coordinating across 10+ security workstreams (VMR, SIRT, Application Security, Third-Party Security, IAM, Conduit, Bug Bounty, and more) as SDO's single-threaded owner for post-close security integration
- Guide DSI initiatives that address security gaps in differentiated environments, developing compensating controls with defined transition plans to long-term owners
- Influence automation roadmaps in partnership with engineering, leveraging automation to reduce M&A onboarding timelines, accelerate security visibility, eliminate manual toil, and scale observability across differentiated environments
- Build and maintain strong partnerships with customer stakeholders (acquired BUs, self-service BUs) and partner security teams (AcqSec, VMR, SIRT, AppSec, TPS, BSTs), ensuring feedback loops are closed and dependencies are managed
- Identify and escalate risks to senior leadership, manage vendor agreements, and influence cross-organizational resource allocation to ensure timely risk reduction
- Drive continuous improvement through retrospectives, lessons learned, and mechanism creation-ensuring DST's processes scale as the team's charter expands
- Mentor and develop TPMs and program managers on the team, raising the bar on operational rigor, technical depth, and customer empathy
A day in the life
The Differentiated Security Team (DST) within Stores Security Business Security Teams (Stores BST) identifies and reduces risk in differentiated environments across SDO-places where Amazon's standard paved-path security solutions don't apply. We secure high-risk business units through targeted engagements, integrate acquisitions from Day 1, build automation to scale observability, and drive strategic security initiatives where standard solutions don't reach. Our vision: zero unmitigated security gaps in differentiated environments, leaving every business unit more secure and self-sufficient than we found it.
We are a cross-functional team of security engineers, software engineers, applied scientists, product managers, and program managers. We close the loop-feeding field insights back int
Amazon.com · Seattle, WA