Amazon.com (AMZN) filed an 8-K with the SEC late this afternoon disclosing that its Board of Directors has elected Kevin R. Mandia — the founder and former CEO of cybersecurity firm Mandiant — as a director, effective 8 September 2026. He was placed on two board committees at once: the Audit Committee and the Security Committee.

What was actually filed

This is a Form 8-K under Item 5.02, the item companies use to report changes in directors and senior officers. The filing itself is short, and everything below comes straight out of it:

• The appointment. On 8 September 2026 the Board elected Mr. Mandia a director and appointed him to the Audit Committee and the Security Committee.
• His background. Per the filing, he has been CEO of Armadin, Inc., a cybersecurity company he founded, since September 2025. He has been a General Partner of Ballistic Ventures since June 2024 (Strategic Partner from December 2021). He was CEO of Mandiant, Inc. from June 2016 to July 2024, and a director there from February 2016 to September 2022 — Mandiant was acquired by Google LLC in September 2022.
• His pay. A restricted stock unit (RSU) award for 4,086 shares of Amazon common stock, vesting in three equal annual installments beginning 15 November 2027, assuming continued service as a director. He also signed the same indemnification agreement Amazon's other directors have.
• A family disclosure. Amazon disclosed that Kristin Mandia, an Amazon employee, is Mr. Mandia's sister-in-law. Her annual salary is $185,000, and in 2026 she received an RSU award for 103 shares vesting over 1.9 years. Amazon states her compensation is consistent with other employees at the same level with similar responsibilities.

Amazon's own newsroom post the same day added more biography: over 30 years in the field, service on the National Security Telecommunications Advisory Committee and CISA's Cybersecurity Advisory Committee, and earlier roles as a computer security officer at the Pentagon and a special agent in the Air Force Office of Special Investigations.

What an 8-K Item 5.02 means

A Form 8-K is the "something happened" filing. Rather than waiting for the next quarterly or annual report, a company files an 8-K within a few business days of a specific triggering event, so the market learns about it at the same time.

Item 5.02 is the slot for people at the top: a director or named executive officer departing, being elected or appointed, and the compensation arrangements attached. It is one of the more readable 8-K items — it usually names the person, gives a short career history, and lists what they were granted.

Two habits worth building when you read one. First, look at the committees, not just the seat — committee assignments tell you what the board actually wants from that person. Second, read to the end. The last paragraph of an Item 5.02 filing is often where family relationships and related-party arrangements get disclosed, exactly as happened here. That disclosure is a feature, not a red flag by itself: companies surface these relationships so shareholders can judge independence for themselves.

Why it matters

The detail that carries the most information is the Security Committee assignment. Most boards fold cybersecurity oversight into the audit committee; the filing shows Amazon maintains a standing board-level Security Committee as a separate body. Putting a career incident-response specialist on it — and on Audit simultaneously — puts cyber-risk expertise in both the place where risk is overseen and the place where financial controls and disclosure are signed off.

That matters more for Amazon than for a typical retailer, because AWS is infrastructure other companies run on. A security failure at Amazon is not only Amazon's problem; it propagates to customers, which is a governance and liability question as much as a technical one. Boards have also come under rising regulatory pressure to show genuine cyber competence rather than a generalist signing off on a briefing.

There is also a plainly interesting line in the biography: the company Mandia founded was bought by Google, a direct AWS competitor in cloud, and he ran it until July 2024 before founding Armadin. The filing states this openly — which is the point of the disclosure.

What this filing does not do is change Amazon's revenue, margins, or cash flow. Board appointments are governance events. They shape how risks get overseen over years, not what the next quarter looks like.

Beginner takeaway

A new director is one of the quieter 8-Ks, and it is easy to skip — but it tells you what a company thinks its biggest risks are. Amazon just spent a board seat, an audit seat and a security seat on cybersecurity expertise, which is a statement about priorities. Read the committee assignments and the final paragraph, and a two-page filing tells you more than the headline does.

FAQ

Does a new board member usually move the stock? Rarely on its own. Board appointments are governance news, not earnings or guidance, and markets typically treat them as long-horizon signals rather than immediate catalysts.

What is the difference between a director and an executive? Executives run the company day to day; directors are elected by shareholders to oversee the executives on shareholders' behalf. A non-employee director like Mr. Mandia attends board and committee meetings, and is paid largely in stock rather than salary.

Why is Amazon paying him in shares that vest years later? RSUs vesting in stages from November 2027 tie his payout to sticking around and to how the shares do, which is the standard way boards align a director's incentives with long-term shareholders rather than a quick term of service.

Why disclose that an employee is his sister-in-law? So shareholders can assess whether a director is genuinely independent. Disclosing a modest, market-rate employment relationship up front is how companies get ahead of the question — the filing gives the salary and the equity award so readers can judge for themselves.

As of 9 September 2026. Source: official SEC filing — read it directly here. We summarise filings for education and may make errors, so always verify against the official document. Educational content only — not investment advice, not a buy/sell recommendation.