Senior Privacy Specialist

- Bachelor's degree
- Experience in compliance, audit or risk management
- Extensive experience in privacy, data governance, compliance, or a related domain, spanning two or more privacy domain areas (e.g., privacy by design, regulatory compliance, IT audit, data subject rights, industry standards, ethical use of data).
- Experience creating written documentation (e.g., privacy assessments, compliance reports, or policy papers) for executive or cross-functional audiences - Experience leveraging technology and implementing lean principles / Six Sigma methodologies to drive process improvements or equivalent
- Master's degree
- Experience in Customer Service
- Experience dealing well with ambiguity, prioritizing needs, and delivering measurable results in an agile environment
- Familiarity with various control frameworks and experience assessing data-level and application-level controls.
- Knowledge of AI/ML privacy governance, including privacy implications of automated decision-making, personalisation, and data analytics.

Amazon is an equal opportunities employer. We believe passionately that employing a diverse workforce is central to our success. We make recruiting decisions based on your experience and skills. We value your passion to discover, invent, simplify and build. Protecting your privacy and the security of your data is a longstanding top priority for Amazon. Please consult our Privacy Notice (https://www.amazon.jobs/en/privacy_page) to know more about how we collect, use and transfer the personal data of our candidates.

Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.

We are seeking a Privacy Specialist to own the lifecycle of complex, cross-functional privacy programs within Customer Service Trust & Compliance (CSTC). You will define privacy strategy, design long-term solutions, and drive risk reduction across Customer Service data processing activities. Operating where strategy and business problems may not be well defined, you will partner with Legal, product owning teams and privacy adjacent teams to influence roadmap priorities, deliver privacy improvements quantified with metrics, and develop unified approaches that strengthen customer trust at an organisational level.

Key job responsibilities
- Own the lifecycle of complex, cross-functional privacy programs, including Records of Processing and Privacy Impact Assessments, from strategy definition through execution and continuous improvement.

- Define program objectives and drive privacy improvements quantified with metrics, contributing to business review narratives and organisational goals.

- Assess privacy implications across products, services, and data flows; identify high-risk processing and drive appropriate risk mitigation aligned to regulatory tolerance levels.

- Partner with Legal and product owning teams to negotiate obligations, drive crisp decisions, and represent privacy programs to directors and VPs.

- Operationalise regulatory and legal requirements into program controls; oversee rollout, testing, and measurement of effectiveness across CS systems.

- Streamline and eliminate excess processes and controls; create predictable paths and drive automation that reduces manual work and unblocks innovation.

- Manage vendor and third-party privacy governance, contributing to privacy-related policies, contracts, and data transfer agreements.

About the team
The Customer Service Trust & Compliance (CSTC) team is the compliance backbone of Customer Service, operating at the intersection of regulatory obligation, customer trust, and Amazon's innovation agenda. Organised across four pillars - Regulatory Intelligence, Governance, Enablement, and Verification - we translate complex regulatory requirements into actionable, builder-friendly frameworks across privacy, AI governance, accessibility, and consumer rights. Our vision is to shift from reactive remediation to preventive assurance: embedding compliance at the design stage of every product, policy, and process to enable innovation at speed while meeting regulatory obligations.