Risk Manager II, AWS Enterprise Risk Management (ERM)

Amazon Inc.; Seattle (WA); On-site; USD 74,000 - 130,000; Full time

Benefits offered by this job

Health insurance

401(k) matching

Paid time off

Parental leave

Job summary

Amazon is seeking a Risk Specialist within AWS Enterprise Risk Management to help identify, assess, and manage enterprise risks affecting operations, strategy, and compliance. You will partner with service teams, finance, legal, and security to ensure risks are identified, measured, escalated, and mitigated within a governance framework.

The role requires strong analytical rigor, attention to detail, and the ability to translate complex risk data into actionable insights for senior leaders

Qualifications

• Bachelor's degree or equivalent in a relevant field.
• Experience in internal audit and risk management or equivalent.
• Ability to present complex technical information to executives and non-technical leaders.
• Experience with data analysis tools such as Excel, Pivot Tables, macros, SQL, Tableau, Quicksight.

Responsibilities

• Conduct enterprise risk assessments across AWS business units using interviews and data analysis.
• Maintain and enhance the enterprise risk register with current ratings and mitigations.
• Produce executive risk reports and dashboards for senior leadership.
• Coordinate evidence gathering and tracking remediation for regulatory inquiries.
• As a cross-functional advisor, partner with service teams, finance, legal, and security to embed risk awareness.
• Develop and maintain risk policies and methodologies aligned to industry standards, with automation where possible.

Skills

Risk assessment

Data analysis

Executive communication

Cross-functional collaboration

Regulatory awareness

Stakeholder engagement

Education

Bachelor's degree or equivalent

Bachelor's degree in Risk Management / related field

Tools

Excel

SQL

Tableau / Quicksight

Job description

Description

AWS Enterprise Risk Management (ERM) is seeking a Risk Specialist to join our team within Risk Management Excellence (RMX). In this role, you will help identify, assess, and manage enterprise-level risks that could affect AWS’s operations, strategy, and compliance posture.

You will support the enterprise risk assessment lifecycle, maintain and enhance the risk register, evaluate mitigating activities, and produce risk insights that informs executive decision-making. You will partner with stakeholders across AWS—including service teams, finance, legal, compliance, and security—to ensure risks are consistently identified, measured, escalated, and mitigated within a structured governance framework.

The ideal candidate is analytically rigorous, detail-oriented, and comfortable working across organizational boundaries in a fast-moving cloud infrastructure environment. You bring a strong foundation in risk frameworks and a passion for translating complex risk data into clear, actionable insights for senior leaders.

Key job responsibilities

You will conduct enterprise risk assessments across AWS business units, identifying emerging and evolving risks through structured interviews, data analysis, and environmental scanning. You will maintain and enhance the enterprise risk register, ensuring risk owners are assigned, ratings are current, and mitigation plans are tracked to completion. You will produce executive-level risk reports and dashboards that translate complex opportunities into clear, decision-ready insights for senior leadership. You will support regulatory compliance efforts by coordinating evidence gathering, responding to audit inquiries, and tracking remediation activities. As a cross-functional risk advisor, you will partner with service teams, finance, legal, and security to embed risk awareness into business processes and strategic planning. You will contribute to the development and maintenance of risk policies, frameworks, and methodologies aligned to industry standards. Throughout, you will look for AWS ERM opportunities to automate workflows, improve data quality, and scale the program’s reach through better tooling and processes.

A day in the life

You start the day reviewing risk register updates and flagging items that need follow-up with risk owners. You shift to project work: conducting a risk assessment interview with a service team, building out a dashboard for an upcoming leadership review, or evaluating control effectiveness for a compliance inquiry. You may join a cross-functional call with Legal or Finance to align on an emerging risk theme. Refining assessment methodologies, drafting policy updates, or working with engineering on a workflow automation.

About the team

Professional certifications such as CRISC, CISA, CISM, CRM, or equivalent.

Basic Qualifications

• Bachelor's degree or equivalent
• Bachelor's degree or equivalent in Risk Management, Business Administration, Security Management, or a related field
• Experience in internal audit and risk management or equivalent
• Experience in risk assessment and enabling organizations to make security decisions
• Experience in written and verbal communication with the ability to present complex technical information in a clear and concise manner to executives and non-technical leaders
• Experience with data analysis tools such as Excel, Pivot Tables, macros, SQL, visualization tools - Tableau, Quicksight, etc.
• Experience coordinating cross-functional inputs, meeting deadlines, and effectively managing competing priorities

Preferred Qualifications

• CISSP, CISA, CISM or other security certification
• Experience in risk management and internal audit including: performing risk assessments and audits, designing controls, managing enterprise control frameworks, and prioritizing risk
• Knowledge of AWS or cloud technologies
• Experience in building financial and operational reports/data sets that inform business decision-making, or experience working in a fast-paced and ambiguous environment
• Bachelor's degree in business, finance, accounting, tax, economics, or a related analytical field, or Bachelor's degree or above and 5+ years of controls/audit/compliance/SOX roles experience
• 6+ years of driving process improvements experience
• Experience collaborating with cross-functional teams

Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.

The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits .

USA, VA, Arlington - 74,200.00 - 129,800.00 USD annually