AmazonPosted 1w ago

Alexa HIPAA Compliance Officer, Devices & Services Trust, Privacy, & Accessibility

Alexa HIPAA Compliance Officer, Devices & Services Trust, Privacy, & Accessibility at Amazon scores 10 out of 100 on AI centrality, which makes it AI Level 1 of 4 (Little AI) on this board. The level measures how much of the work is AI, not seniority.

US, VA, Arlingtonseniorfull-time$166k-$224k

AI in this role

Manage the HIPAA compliance program for the Alexa business, ensuring health and wellness data privacy and security.

alexa

hipaa-complianceprivacyrisk-managementregulatory-compliance

Devices & Services Trust, Privacy & Accessibility (TPA) is responsible for maintaining and raising the trust bar for Amazon customers across a diverse set of 30+ devices and services. TPA offers horizontal services for builders to ensure trust, privacy, and accessibility is built into our products and services. We also build customer-facing capabilities that provide customers with control and transparency and reduce privacy risk, while enabling partner teams to innovate with appropriate guardrails for content moderation, privacy, accessibility, and trust.

TPA is seeking a HIPAA Compliance Officer responsible for developing, maintaining, communicating, and assessing adherence to a comprehensive HIPAA compliance program for the Alexa business. The ideal candidate should feel excited and empowered to solve complex problems to protect customer privacy, integrate customer trust into everything we do, hold control owners accountable for enforcement, and assess, record, track, and report program health to senior leaders.

Key job responsibilities
You will work with engineering, product, legal, PR, marketing, and other privacy and security teams across Amazon to:

- Develop and maintain a comprehensive HIPAA compliance program to safeguard users' Protected Health Information (PHI) and health and wellness data
- Serve as the principal privacy subject matter expert responsible for ensuring Alexa's health and wellness customer experiences comply with regulatory requirements and earn and keep customer trust
- Establish and manage privacy requirements and controls for HIPAA compliance and health and wellness customer experiences
- Conduct pre-launch privacy reviews and annual risk assessments for HIPAA compliance and adherence to other health and wellness privacy requirements
- Identify, advise on, and assess adherence to health and wellness-related privacy promises, ensuring that adequate controls are in-place to keep them
- Promote compliance with applicable laws, regulations, and contractual obligations
- Conduct change management to ensure business awareness and implementation of privacy requirements and controls
- Evaluate HIPAA compliance program and offer recommendations for continuous improvement
- Evaluate and escalate compliance issues and develop mitigations to resolve them, including overseeing incident response and reporting
- Create and maintain documentation of compliance activities to meet regulatory and audit requirements
- Develop and administer compliance trainings to relevant employees
- Monitor regulatory developments, industry frameworks and best practices, and business developments and update the HIPAA compliance program in response
- Regularly report to senior leadership on the health and performance of health and wellness privacy requirements implementation
- Contribute to the development of Alexa's overall privacy strategy and vision

A day in the life
This is an inherently cross-functional role where you will work directly with engineers, product managers, policy and compliance specialists, legal, PR, marketing, public policy, and other Amazonians to create a top tier HIPAA compliance and health and wellness program and hold the business accountable for implementing mechanisms to enforce its privacy requirements. You will use your deep health privacy expertise and demonstrate your excellent writing skills and experience driving alignment among diverse stakeholders. You should be comfortable working in a fast-paced, rapidly evolving environment with fast delivery time, rapid iteration, and data-driven decision-making.

About the team
Our TPA team is dedicated to supporting new members. We have a broad mix of experience levels and tenures, and are building an environment that celebrates knowledge sharing and mentorship. We care about your career growth and strive to assign projects based on what will help each team member develop into a better-rounded professional enabled to take on increasingly complex tasks as their careers progress.

Basic qualifications

- Experience working closely with and advising senior executives of an organization or equivalent
- Bachelor's degree or equivalent
- 10+ years of privacy compliance experience
- Experience creating, managing, and scaling a HIPAA compliance program
- Expert knowledge of HIPAA and other health and wellness-related privacy requirements
- Experience developing, implementing, and maintaining privacy policies
- Ability to understand and evaluate technical controls against privacy requirements
- Ability to interpret complex privacy requirements and translate them into practical guidance for leaders and operational teams
- Excellent written and verbal communication and presentation skills

Preferred qualifications

- Experience in the tech industry or equivalent
- At least 1 privacy certification (e.g., Certified in Healthcare Compliance (CHC), International Association of Privacy Professionals (IAPP))
- Experience serving as a HIPAA Compliance Officer or Privacy Officer
- Experience working in a government, legal, healthcare, managed care, or health insurance environment in a regulatory, privacy, or compliance role
- Experience interacting with senior leaders and executives, Internal Audit, regulators, and external auditors
- Juris Doctor (JD), Master of Healthcare Administration (MHA), Master of Business Administration (MBA), Master of Public Health (MPH), or other related advanced degree

Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.

The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits.

USA, VA, Arlington - 166,000.00 - 224,400.00 USD annually
USA, WA, Seattle - 166,000.00 - 224,400.00 USD annually

Prepare for this job

A free preview built only from this posting: what it asks for, what you could be asked in an interview, and how to adjust your resume.

Skills and AI tools this role asks for

Hipaa CompliancePrivacyRisk ManagementRegulatory ComplianceAlexa

Questions you could be asked

Tell me about a project where hipaa compliance was part of your work. What did you do?
Tell me about a project where privacy was part of your work. What did you do?
Tell me about a project where risk management was part of your work. What did you do?
Tell me about a project where regulatory compliance was part of your work. What did you do?
Walk me through how you've used Alexa in your day-to-day work.

Adapt your resume

List these exact terms on your resume: Hipaa Compliance, Privacy, Risk Management, Regulatory Compliance, and Alexa. An applicant tracking system matches the wording, not the idea.
Attach one line of real, concrete experience to at least one of them — a tool named with nothing behind it rarely survives a human read.

Want your resume actually rewritten for this job?

The free preview above is everything we have today. A full resume rewrite is not live yet and has no price set. Join the waitlist and we will email you if we open it.