Risk Manager II, AWS Enterprise Risk Management (ERM)

Amazon Inc.; Arlington (VA); On-site; USD 120,000 - 180,000; Full time

Job summary

Amazon Inc. is seeking a Risk Specialist within AWS Enterprise Risk Management to identify, assess, and manage enterprise risks that could impact operations, strategy, and compliance.

You will support risk assessment lifecycle, maintain risk register, produce risk insights for executive decision-making, and partner with service teams, finance, legal, and security to embed risk awareness. The role requires analytical rigor, attention to detail, and the ability to translate complex risk data into

Qualifications

• Professional certifications such as CRISC, CISA, CISM, CRM, or equivalent.
• Experience with enterprise risk assessment and governance frameworks.
• Ability to translate risk data into executive insights.
• Strong analytical and cross-functional collaboration skills.

Responsibilities

• Conduct enterprise risk assessments across AWS business units.
• Maintain and enhance the enterprise risk register and mitigation tracking.
• Produce executive-level risk reports and dashboards.
• Coordinate evidence gathering for regulatory compliance and audits.
• Partner with service teams, finance, legal, and security to embed risk awareness.
• Develop and maintain risk policies and methodologies.
• Identify automation opportunities to scale the program.

Skills

Risk assessment

Data analysis

Stakeholder collaboration

Dashboards

Education

CRISC

CISA

CISM

CRM

Tools

Risk management software

Job description

AWS Enterprise Risk Management (ERM) is seeking a Risk Specialist to join our team within Risk Management Excellence (RMX). In this role, you will help identify, assess, and manage enterprise-level risks that could affect AWS’s operations, strategy, and compliance posture.

You will support the enterprise risk assessment lifecycle, maintain and enhance the risk register, evaluate mitigating activities, and produce risk insights that informs executive decision-making. You will partner with stakeholders across AWS—including service teams, finance, legal, compliance, and security—to ensure risks are consistently identified, measured, escalated, and mitigated within a structured governance framework.

The ideal candidate is analytically rigorous, detail-oriented, and comfortable working across organizational boundaries in a fast-moving cloud infrastructure environment. You bring a strong foundation in risk frameworks and a passion for translating complex risk data into clear, actionable insights for senior leaders.

Key job responsibilities

You will conduct enterprise risk assessments across AWS business units, identifying emerging and evolving risks through structured interviews, data analysis, and environmental scanning. You will maintain and enhance the enterprise risk register, ensuring risk owners are assigned, ratings are current, and mitigation plans are tracked to completion. You will produce executive-level risk reports and dashboards that translate complex opportunities into clear, decision-ready insights for senior leadership. You will support regulatory compliance efforts by coordinating evidence gathering, responding to audit inquiries, and tracking remediation activities. As a cross-functional risk advisor, you will partner with service teams, finance, legal, and security to embed risk awareness into business processes and strategic planning. You will contribute to the development and maintenance of risk policies, frameworks, and methodologies aligned to industry standards. Throughout, you will look for AWS ERM opportunities to automate workflows, improve data quality, and scale the program’s reach through better tooling and processes.

A day in the life

You start the day reviewing risk register updates and flagging items that need follow-up with risk owners. You shift to project work: conducting a risk assessment interview with a service team, building out a dashboard for an upcoming leadership review, or evaluating control effectiveness for a compliance inquiry. You may join a cross-functional call with Legal or Finance to align on an emerging risk theme. Refining assessment methodologies, drafting policy updates, or working with engineering on a workflow automation.

About the team

Professional certifications such as CRISC, CISA, CISM, CRM, or equivalent.