Risk Manager, AWS Risk Management

Amazon; Arlington (VA); On-site; USD 95,000 - 135,000; Full time

Job summary

Amazon.com Services LLC is seeking a Risk Specialist for the AWS Third-Party Risk Management (TPRM) team within Risk Management Excellence (RMX). You will monitor, assess, and report on risks in AWS’s third-party ecosystem, managing risk through Sentinel, and supporting audits and vendor assessments.

You will partner with legal, compliance, supply chain, and engineering to identify, measure, and mitigate third-party risks in a fast-moving cloud environment.

Qualifications

• Bachelor's degree or equivalent.
• 3+ years of compliance program management, governance, audit, risk/loss prevention, or equivalent experience.
• Demonstrated understanding of ERM and/or TPRM frameworks.

Responsibilities

• Monitor third-party risk alerts and escape issues as they arise, ensuring risks are identified and addressed quickly.
• Own the monthly risk report from draft through executive distribution, and track key metrics that measure program health.
• Produce on-demand risk profiles for internal stakeholders using financial intelligence platforms and AI-assisted tooling.
• Lead financial viability assessments for critical vendors—collecting due diligence reviews, distributing risk surveys, and scoring financial health—while partnering with engineering to automate data collection.
• Serve as the team’s point of contact for regulatory and customer audits, and document third-party incidents in coordination with security operations.
• Drive vendor reassessments, process risk nominations for new and existing third parties, and participate in launch reviews for new AWS services.
• Look for ways to streamline operations through automation, tooling improvements, and well-maintained runbooks.

Skills

Risk management

Compliance

ERM

TPRM

Regulatory

Education

Bachelor's degree or equivalent

Tools

SQL

Excel

Job description

Job ID: 10548626 | Amazon.com Services LLC

AWS Third-Party Risk Management (TPRM) is seeking a Risk Specialist to join our team within Risk Management Excellence (RMX). In this role, you will serve as a key operator within the TPRM program, responsible for monitoring, assessing, and reporting on risks associated with AWS’s critical third-party ecosystem.

You will manage ongoing risk surveillance through the Sentinel platform, produce executive-level risk intelligence reports, support regulatory audits, lead financial viability assessments, and coordinate incident response documentation. This is a highly cross-functional role that partners with AWS service teams, legal, compliance, supply chain, and external vendors to ensure third-party risks are identified, measured, and mitigated.

The ideal candidate is a self-starter with strong analytical skills, an eye for process improvement, and comfort navigating ambiguity in a fast-moving cloud infrastructure environment.

Key job responsibilities

• You will monitor third-party risk alerts and escape issues as they arise, ensuring risks are identified and addressed quickly.
• You will own the monthly risk report from draft through executive distribution, and track key metrics that measure program health.
• You will produce on-demand risk profiles for internal stakeholders using financial intelligence platforms and AI-assisted tooling.
• You will lead financial viability assessments for critical vendors—collecting due diligence reviews, distributing risk surveys, and scoring financial health—while partnering with engineering to automate data collection.
• You will serve as the team’s point of contact for regulatory and customer audits, and document third-party incidents in coordination with security operations.
• You will also drive vendor reassessments, process risk nominations for new and existing third parties, and participate in launch reviews for new AWS services.
• Throughout, you will look for ways to streamline operations through automation, tooling improvements, and well-maintained runbooks.

A day in the life

You start the day triaging Sentinel alerts and actioning third-party risk indicators—executing overrides, updating logs, and filing tickets. Midday, you shift to project work: pulling financial health data for a viability assessment, drafting a risk summary for a stakeholder request, or coordinating audit evidence with a program manager. You may join a cross-functional call with Legal or Supply Chain on an open incident. Afternoons are for reporting and improvement—updating reassessment trackers, compiling the flash report, or partnering with engineering on an automation that saves the team hours each week.

About the team

The Risk Management Excellence (RMX) team within AWS FGBS serves as the central hub for enterprise risk management across AWS. We partner with Legal, Compliance, Security, Finance, and business teams to ensure coordinated risk management at scale. The team is collaborative, intellectually curious, and committed to operational excellence. You'll work alongside risk managers, compliance specialists, and program managers building scalable risk frameworks in one of the world's most dynamic and regulated technology environments. This is a high-visibility role with direct impact on AWS's regulatory relationships and customer trust.

Basic Qualifications

• Bachelor's degree or equivalent
• 3+ years of compliance program management, legal, governance, audit, risk/loss prevention, or equivalent experience
• Demonstrated understanding of ERM and/or TPRM frameworks

Preferred Qualifications

• Professional auditing qualification, or similar risk or compliance credentials
• Experience with SQL and Excel
• Familiarity with one or more of the following regulatory regimes: DORA, UKCTP, US Federal Banking Agency requirements, or equivalent financial services regulations

Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.

The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits .