Risk Manager, ISOC, Security Operations Group | Worldwide Operations Security

Amazon is hiring a Risk Manager, ISOC, Security Operations Group | Worldwide Operations Security in Madrid, Spain. Level rates it ; you can apply on Amazon.

Level's read on this job

Level rates this role Little AI ●○○○: aI is not part of the work.
Tools and skills the posting cites include risk management, regulatory compliance and vendor management.
Level classifies it as a senior role.
Level lists 20,000+ other open roles at Amazon.

AI in this role

Build and maintain compliance, training, and operational frameworks for international security monitoring operations.

risk-managementregulatory-compliancevendor-managementtraining-developmentaudit

You will own the operational enablement functions that allow ISOC (Intervention Security Operations Center) international monitoring operations to run at scale across regulated jurisdictions. This role is responsible for regulatory compliance management, technology integration coordination, vendor contract management, training and certification programs, and the standard operating procedures that ensure consistent execution regardless of location or operator. You are the person who builds the systems and frameworks that the rest of the team operates within.

This is not an operations execution role. You will not manage shifts or handle alerts. You will build the compliance backbone, negotiate vendor agreements, coordinate platform deployments, develop training curricula, and maintain the audit and governance frameworks that keep operations legally sound and operationally excellent. You enable the people who execute by giving them the tools, training, standards, and contracts they need to perform.

Key job responsibilities
● Own regulatory and compliance management for ISOC monitoring operations across all international jurisdictions, ensuring operations meet data protection, surveillance, and privacy requirements
● Navigate legal frameworks for remote monitoring, cross-border data transfer, and alert handling, partnering with legal counsel to translate regulatory requirements into operational procedures
● Manage vendor contracts for third party monitoring operators, including agreement negotiation, SLA definition, performance measurement, cost optimization, and renewal planning
● Coordinate technology integration across the monitoring platform, including new system deployments, platform standardization, configuration management, and tool selection
● Develop and maintain the training and certification program for ISOC analysts, including onboarding curricula, recurring proficiency assessments, and specialized skill development for new use cases
● Own the standard operating procedure (SOP) library, ensuring procedures remain current with regulatory changes, technology updates, and lessons learned from operational incidents
● Build and maintain the audit and compliance framework, including internal assessment schedules, evidence collection, regulatory reporting, and remediation tracking
● Drive operational excellence initiatives: process improvement, efficiency analysis, quality management, and standardization across international control room operations
● Support the EU Country Lead and broader ISOC leadership with operational enablement, removing barriers and providing the compliance, technology, and vendor infrastructure needed for growth

A day in the life
Your morning starts with reviewing a regulatory update from counsel on a pending change to monitoring consent requirements in one of your operating jurisdictions. You assess the operational impact, draft the Standard Operating Procedure revision needed, and flag the training update required for affected analysts. Mid-morning, you join a vendor performance review call to discuss compliance, staffing shortfalls, and contract renewal terms for one of your third party operator agreements. You spend part of your day working on the technology integration roadmap: coordinating with the platform team on a new system deployment timeline, validating that data handling configurations meet jurisdictional requirements, and updating the integration checklist for the operations team. After lunch, you review the latest analyst certification results from the quarterly assessment cycle, identify skill gaps, and adjust the training program accordingly. You close the day updating the compliance tracker for an upcoming audit and preparing a cost optimization proposal for the next vendor negotiation cycle.

About the team
ISOC (Intervention Security Operations Center) is Amazon's centralized, alert-driven security intervention capability within the Security Operations Group. Operating 24/7 control rooms across multiple global locations, ISOC receives technology-generated signals, validates threats in real time, and coordinates the appropriate response function. ISOC sits within SOG under Worldwide Operations Security (WWOS) and is positioned within the security lifecycle model as the team that owns the Intervention function. The international operations span multiple countries and regulatory environments, requiring robust compliance frameworks, standardized procedures, and coordinated enablement functions to maintain operational consistency at scale. This role provides that enablement layer, ensuring that operations teams have the regulatory clearance, technology platforms, trained workforce, and vendor support they need to deliver.

Basic qualifications

- Bachelor's degree or equivalent
- Experience overseeing security operations and working with security vendors/contractors
- Experience in written and verbal communication with the ability to present complex technical information in a clear and concise manner to executives and non-technical leaders
- Experience with multi-jurisdictional regulatory compliance, including data protection frameworks and operational licensing requirements
- Demonstrated ability to build and maintain training programs, standard operating procedures, or certification frameworks for operational teams

Preferred qualifications

- Direct experience with EU data protection regulations (GDPR, ePrivacy Directive) and their application to surveillance or monitoring operations
- Experience with security technology procurement, including vendor evaluation, RFP development, and contract structuring
- Background in SOC compliance, including quality management systems or ISO certification frameworks
- Experience developing training programs for technical operator roles, including competency assessment and recurrent certification

Amazon is an equal opportunities employer. We believe passionately that employing a diverse workforce is central to our success. We make recruiting decisions based on your experience and skills. We value your passion to discover, invent, simplify and build. Protecting your privacy and the security of your data is a longstanding top priority for Amazon. Please consult our Privacy Notice (https://www.amazon.jobs/en/privacy_page) to know more about how we collect, use and transfer the personal data of our candidates.

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.

How we rate this

Risk Manager, ISOC, Security Operations Group | Worldwide Operations Security at Amazon rates 0 out of 100 for how much of the daily work is AI. That makes it Little AI (AI Level 1 of 4). The level is about AI in the job, not seniority.

Classification

Little AI. AI is not part of the work.

●●●● Builds AI80 to 100
●●●○ Works on AI60 to 79
●●○○ Uses AI40 to 59
●○○○ Little AI0 to 39

Levels come from how often the tools, models and workflows of the role are named in the posting itself. Read the description and count the AI tools, models and workflows it names.

Key facts

Risk Manager, ISOC, Security Operations Group | Worldwide Operations Security is an open job at Amazon.
Level rates this role AI Level 1 of 4: Little AI.
The role is based in ES, M, Madrid.
The job was posted on September 18, 2026.
Seniority: senior.
Applications are handled by Amazon. Apply on Amazon

Prepare for this job

Built from this posting and from similar jobs on Level.

Skills and AI tools this role asks for

Risk ManagementRegulatory ComplianceVendor ManagementTraining DevelopmentAudit

Questions you could be asked

Tell me about a project where risk management was part of your work. What did you do?
Tell me about a project where regulatory compliance was part of your work. What did you do?
Tell me about a project where vendor management was part of your work. What did you do?
Tell me about a project where training development was part of your work. What did you do?
Tell me about a project where audit was part of your work. What did you do?

Adapt your resume

List these exact terms on your resume: Risk Management, Regulatory Compliance, Vendor Management, Training Development, and Audit. An applicant tracking system matches the wording, not the idea.
Attach one line of real, concrete experience to at least one of them. A tool named with nothing behind it rarely survives a human read.

Want an expert to read your CV for this job?

Free. Send your CV and the role you want next. You get your review by email within 24 hours.

Get a free CV review Get your CV rewritten Check your resume with the ATS resume checker