Risk Manager II, AWS Enterprise Risk Management (ERM)

Amazon Inc.; Arlington (VA); On-site; USD 74,000 - 130,000; Full time

Job summary

Amazon is seeking an Enterprise Risk Specialist within AWS ERM (RMX) in Arlington, VA. You will identify, assess, and manage enterprise risks impacting operations, strategy, and compliance, delivering insights for senior leadership.

You will collaborate with service teams, finance, legal, and security to maintain risk registers, track mitigations, and deliver executive dashboards. A strong background in risk frameworks and data storytelling is essential.

Qualifications

• Bachelor's degree or equivalent
• Experience in internal audit and risk management or equivalent
• Experience in risk assessment and enabling organizations to make security decisions
• Experience in communicating complex information to executives and non-technical leaders
• Experience with data analysis tools such as Excel, Pivot Tables, macros, SQL, Tableau/Quicksight
• Experience coordinating cross-functional inputs and deadlines

Responsibilities

• Conduct enterprise risk assessments across AWS business units.
• Maintain and enhance the enterprise risk register and mitigation plans.
• Produce executive-level risk reports and dashboards.
• Support regulatory compliance efforts by coordinating evidence gathering and remediation tracking.
• Partner with service teams, finance, legal, and security to embed risk awareness.
• Develop and maintain risk policies, frameworks, and methodologies.
• Identify opportunities to automate workflows and scale the program.

Skills

Analytical thinking

Cross-functional collaboration

Risk assessment

Executive communication

Data storytelling

Education

Bachelor's degree in Risk Management, Business Administration, Security Management, or related field

Certifications: CISSP, CISA, CISM or other security certification

Tools

Excel

Pivot Tables

Macros

SQL

Tableau, QuickSight

Job description

Job ID: 10587811 | Amazon.com Services LLC

AWS Enterprise Risk Management (ERM) is seeking a Risk Specialist to join our team within Risk Management Excellence (RMX). In this role, you will help identify, assess, and manage enterprise-level risks that could affect AWS's operations, strategy, and compliance posture.

You will support the enterprise risk assessment lifecycle, maintain and enhance the risk register, evaluate mitigating activities, and produce risk insights that informs executive decision-making. You will partner with stakeholders across AWS—including service teams, finance, legal, compliance, and security to ensure risks are consistently identified, measured, escalated, and mitigated within a structured governance framework.

The ideal candidate is analytically rigorous, detail-oriented, and comfortable working across organizational boundaries in a fast-moving cloud infrastructure environment. You bring a strong foundation in risk frameworks and a passion for translating complex risk data into clear, actionable insights for senior leaders.

Key job responsibilities

• You will conduct enterprise risk assessments across AWS business units, identifying emerging and evolving risks through structured interviews, data analysis, and environmental scanning.
• You will maintain and enhance the enterprise risk register, ensuring risk owners are assigned, ratings are current, and mitigation plans are tracked to completion.
• You will produce executive-level risk reports and dashboards that translate complex opportunities into clear, decision-ready insights for senior leadership.
• You will support regulatory compliance efforts by coordinating evidence gathering, responding to audit inquiries, and tracking remediation activities.
• As a cross-functional risk advisor, you will partner with service teams, finance, legal, and security to embed risk awareness into business processes and strategic planning.
• You will contribute to the development and maintenance of risk policies, frameworks, and methodologies aligned to industry standards.
• Throughout, you will look for AWS ERM opportunities to automate workflows, improve data quality, and scale the program’s reach through better tooling and processes.

A day in the life

You start the day reviewing risk register updates and flagging items that need follow-up with risk owners. You shift to project work: conducting a risk assessment interview with a service team, building out a dashboard for an upcoming leadership review, or evaluating control effectiveness for a compliance inquiry. You may join a cross-functional call with Legal or Finance to align on an emerging risk theme. Refining assessment methodologies, drafting policy updates, or working with engineering on a workflow automation.

About the team

Professional certifications such as CRISC, CISA, CISM, CRM, or equivalent.

Basic Qualifications

• Bachelor's degree or equivalent
• Bachelor's degree or equivalent in Risk Management, Business Administration, Security Management, or a related field
• Experience in internal audit and risk management or equivalent
• Experience in risk assessment and enabling organizations to make security decisions
• Experience in written and verbal communication with the ability to present complex technical information in a clear and concise manner to executives and non-technical leaders
• Experience with data analysis tools such as Excel, Pivot Tables, macros, SQL, visualization tools - Tableau, Quicksight, etc.
• Experience coordinating cross-functional inputs, meeting deadlines, and effectively managing competing priorities

Preferred Qualifications

• CISSP, CISA, CISM or other security certification
• Experience in risk management and internal audit including: performing risk assessments and audits, designing controls, managing enterprise control frameworks, and prioritizing risk
• Knowledge of AWS or cloud technologies
• Experience in building financial and operational reports/data sets that inform business decision-making, or experience working in a fast-paced and ambiguous environment
• Bachelor's degree in business, finance, accounting, tax, economics, or a related analytical field, or Bachelor's degree or above and 5+ years of controls/audit/compliance/SOX roles experience
• 6+ years of driving process improvements experience
• Experience collaborating with cross-functional teams

Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you're applying in isn't listed, please contact your Recruiting Partner.

The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits .

USA, VA, Arlington - 74,200.00 - 129,800.00 USD annually

Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Veterans, military spouses, and people with disabilities are encouraged to apply.