IT Risk Manager

Amazon; London; On-site; GBP 60,000 - 85,000; Full time

Job summary

Amazon is seeking a mid-level IT Risk Manager to enhance the IT risk management environment within its global operations. The successful candidate will implement robust IT risk controls and policies while collaborating with cross-functional teams. Ideal applicants should possess significant IT risk management experience, ideally within financial services, along with a strong educational background in technology-related fields.

Qualifications

• Minimum 7 years of experience in technology risk or audit, preferably in financial sectors.
• Experience in enterprise risk management and regulatory compliance.
• Knowledge of IT risk frameworks and cloud platform security.

Responsibilities

• Support the Global Technology Officer with compliance attestation.
• Design and implement IT risk controls and mitigation strategies.
• Conduct Business Impact Analysis for critical IT services.

Skills

Risk Management

Regulatory Compliance

Stakeholder Influence

IT Security

Education

Degree in Computer Science or related field

Master's degree or equivalent

Tools

COBIT

NIST

ISO 27001

ITIL

SDLC

Job description

Job ID: 3008328 | Amazon Ireland Support Services Limited

This is a mid-level position ideal for candidates looking to grow their career in IT Risk Management.

Are you an Information Technology (IT) Risk Manager ready for a step-up role with within Amazon’s unique IT environment? We are looking for an experienced IT Risk Manager within the First Line of Defense (1LoD) to enhance our IT risk management and control environment. Reporting to the Senior IT Risk Manager, the successful candidate will contribute to the development of a 1st Line IT Risk program across Amazon global regulated entities. The ideal candidate must have IT risk management experience, preferably, within the payments or financial services sector.

Key job responsibilities
• Support the Global Technology Officer (GTO) to attest compliance with the Global IT Risk Management Framework and legal entity regulatory requirements.
• Design and implement IT risk controls, mitigation strategies, and remediation plans.
• Establish IT risk management policies and procedures, ensure their implementation.
• Define key risk indicators (KRIs), key performance indicators (KPIs) and SLAs for IT risk management.
• Test critical applications to ensure resilience and recovery objectives set by the regulated entities are met.
• Perform risk based deep dives to identify and understand IT risk drivers and to validate root causes of IT related loss events.
• Contribute to risk assessment of third-party IT service providers.
• Support in conduct Business Impact Analysis (BIA) to identify and classify critical IT services and systems.

BASIC QUALIFICATIONS

- Degree in Computer Science, IT, Engineering, related technical field or equivalent combination of education and relevant work experience.
- Experience in enterprise risk management (ERM), regulatory compliance, and strategic risk oversight.
- Experience in IT compliance, IT audit or IT risk management.
- Experience building cross-functional partnerships and influencing stakeholders across the organization to act without having a direct reporting relationship.
- A minimum of 7 years’ experience in technology risk, technology audit, within a financial institution, licensed money transmitter, or payments related e-commerce function.
- A good understanding of IT risk and control frameworks: COBIT, NIST, ISO 27001, ITIL or equivalent.
- Understanding of SDLC.

PREFERRED QUALIFICATIONS

- Certified Information Systems Auditor (CISA) or equivalent IT auditing and risk certification.
- Certified Information Security Manager (CISM), Certified in Risk and Information Systems Control (CRISC), Certified Information Systems Security Professional (CISSP) or equivalent IT Risk, Governance, Security Strategy certification.
- Digital transformations experience to drive process improvements.
- A good understanding of regulatory landscape (CSSF, DORA, EBA, NIS2, SOC 2)
- Experience with cloud platforms risk management, cloud security, and compliance, including IAM, cloud incident response, and resilience testing.
- Master's degree or equivalent.

Amazon is an equal opportunities employer. We believe passionately that employing a diverse workforce is central to our success. We make recruiting decisions based on your experience and skills. We value your passion to discover, invent, simplify and build. Protecting your privacy and the security of your data is a longstanding top priority for Amazon. Please consult our Privacy Notice (https://www.amazon.jobs/en/privacy_page ) to know more about how we collect, use and transfer the personal data of our candidates.

Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.

Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.