Principal Technical Program Manager, Differentiated Security Team, Stores BST

The Differentiated Security Team (DST) within Stores Security (StoresSec) Business Security Teams (Stores BST) is seeking a Principal Technical Program Manager to join the DST Leadership Team (DST-LT) and drive program maturity, operational excellence, and strategic evolution across all four of DST's charters: - Merger & Acquisition (M&A) Security Integration across Amazon WW Stores, Devices and Other (SDO) lines of business - Security Targeted Research, Insights & Key Engagements (STRIKE), providing time-bound security services to select business units - Differentiated Security Initiatives (DSI) - Automation & Tooling Development DST partners with newly-acquired and existing Amazon Business Units to reduce risk by securing non-standard technologies where Amazon's paved-path solutions don't apply. As a member of the DST-LT, this Principal TPM will be instrumental in driving the team's tenets, particularly closing the loop by feeding field insights back into StoresSec and core security partner teams to improve the broader security ecosystem and continuously raise the security bar. You will lead cross-charter program strategy, establish and mature operational mechanisms, and ensure every engagement leaves business units more secure and self-sufficient with clear ownership and no ambiguity about accountability. This role requires deep technical judgment to navigate complex security architectures across differentiated environments, the ability to operate with high ambiguity across acquired subsidiaries with diverse technology stacks, and the leadership presence to influence senior stakeholders (VPs/SVPs) on security trade-offs and resource prioritization. Key job responsibilities - Aligning security and service strategy with Amazon Security (AmSec) objectives and working backwards to reduce deviations from standard practices and requirements - Build mechanisms to collect voice of customers and continuous feedback loops with key stakeholders - Lead and mature DST's operational rhythm: MBRs/QBRs, flash reporting, WBR metrics, goal tracking, and executive-level reviews that provide visibility into security posture, integration progress, and risk burn-down - Drive regular program reviews and status updates with key stakeholders - Serve as the process owner and drive DST rhythm of business operations - Champion DST's tenets across all engagements by systematically feeding field learnings and insights back into StoresSec, Stores-BST, and core security partner teams to drive prioritization of compensating controls and raise the broader security bar - Own cross-charter program strategy and roadmaps, ensuring alignment between pillars and identifying opportunities where work in one charter (e.g., M&A findings) informs and accelerates another (e.g., STRIKE prioritization or DSI initiatives) - Drive security integration programs end-to-end by coordinating across 10+ security workstreams (VMR, SIRT, Application Security, Third-Party Security, IAM, Conduit, Bug Bounty, and more) as SDO's single-threaded owner for post-close security integration - Guide DSI initiatives that address security gaps in differentiated environments, developing compensating controls with defined transition plans to long-term owners - Influence automation roadmaps in partnership with engineering, leveraging automation to reduce M&A onboarding timelines, accelerate security visibility, eliminate manual toil, and scale observability across differentiated environments - Build and maintain strong partnerships with customer stakeholders (acquired BUs, self-service BUs) and partner security teams (AcqSec, VMR, SIRT, AppSec, TPS, BSTs), ensuring feedback loops are closed and dependencies are managed - Identify and escalate risks to senior leadership, manage vendor agreements, and influence cross-organizational resource allocation to ensure timely risk reduction - Drive continuous improvement through retrospectives, lessons learned, and mechanism creation—ensuring DST's