Risk & Compliance Manager, Data Security And Privacy
CurrentI am responsible for managing the data security and privacy compliance of Amazon’s Global Risk Management and Claims (GRMC) organization. As a leader on the GRMC Business Assurance Team, I am responsible for assessing regulatory information security and privacy risks associated with GRMC data and processes. Responsibilities and accomplishments include:• Strategically execute the security and privacy compliance program as a leader on Amazon’s Global Risk Management and Claims (GRMC) Business Assurance Team to identify, assess and mitigate business risks.• Identify privacy risks for the business and drive the organization-wide privacy compliance strategy, goals, and implementation plans as a Privacy Bar Raiser supporting the Treasury and Risk Management organizations.• Project leader responsible for creating a new process to standardize the response to security and privacy incidents. Project completed on time with all deliverables addressed resulting in a new policy and updated process training. • Established a standard process in partnership with the HR Privacy Team for GRMC employees to respond to global Data Subject Requests by identifying the systems in scope, assigning owners, and defining response times. • Create and deliver quarterly and annual recurring trainings on InfoSec, Privacy and Cyber Risk to the GRMC. Generate and distribute just in time trainings and resources to employees based on recent assessments and events.