App Center Program Manager, Amazon Business
Come be a part of a rapidly expanding $35 billion-dollar global business. At Amazon Business, a fast-growing startup passionate about building solutions, we set out every day to innovate and disrupt the status quo. We stand at the intersection of tech & retail in the B2B space developing innovative purchasing and procurement solutions to help businesses and organizations thrive. At Amazon Business, we strive to be the most recognized and preferred strategic partner for smart business buying.
Bring your insight, imagination and a healthy disregard for the impossible. Join us in building and celebrating the value of Amazon Business to buyers and sellers of all sizes and industries. Unlock your career potential.
The Amazon Business Global Integrations team is seeking an innovative, results-oriented Program Manager specializing in Risk, Security, and Privacy for Integration Security. This role will focus on ensuring the security, compliance, and trustworthiness of our integration ecosystem across App Center, Punchout, Ordering, APIs and eInvoicing solutions. The vision is to make Amazon Business integrations a trusted, secure platform where business customers can confidently connect third-party applications while maintaining the highest standards of data protection and risk mitigation.
This role is a core part of App Center Operations, responsible for defining and enforcing the privacy, security, and operational readiness standards required for third-party and partner applications to integrate with Amazon Business. App Center Operations ensures that integrations meet consistent governance expectations across data handling, workflow behavior, launch readiness, and post-launch operations, protecting customer trust s role is accountable not only for audit execution, but for defining the operating model, governance processes, and readiness standards that enable Amazon Business to scale third-party integrations safely and consistently.
This role is a hybrid of:
- Security Program Management – owning and executing end-to-end security and privacy audit processes for all integration channels, establishing baseline security expectations, and maintaining consistent review standards across the partner ecosystem;
- Partnership Risk Management – working closely with Solution Architect (SA) teams as a security specialist to evaluate, onboard, and monitor technical partners while ensuring they meet Amazon's security standards and compliance requirements;
- Cross-functional Security Leadership – driving security initiatives across Product, Engineering, Legal, and Operations teams to identify vulnerabilities, mitigate risks, and enhance the overall security posture of our integration platforms.
We expect this individual to operate across distributed, cross-functional organizations, with a mix of strategic security planning and tactical risk mitigation execution. This role is accountable for end-to-end execution and outcomes of the security and privacy audit program, while partner teams provide subject-matter expertise and guidance. This role will be highly visible at senior levels of Amazon Business.
Key job responsibilities- Own end-to-end security and privacy audit process for all apps and integrations across App Center, Punchout, Ordering, and eInvoicing; establish baseline security expectations and maintain central audit tracker as system of record
- Define, document, and continuously evolve App Center security, privacy, and operational readiness processes, including standard intake workflows, security questionnaires, audit frameworks, and risk classification models; ensure these processes are scalable, repeatable, and consistently applied across all integration channels
- Conduct comprehensive risk assessments for new and existing partners, analyzing architecture diagrams, data flows, security documentation, and privacy policies to identify vulnerabilities and compliance gaps
- Make approval decisions (approve, approve with conditions, or block) and manage remediation tracking with clear timelines; ensure security approval is required launch gate for all net-new apps
- Coordinate with SA…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).