Senior Benefits Risk & Vendor Compliance Strategist

Amazon; Seattle (WA); Presencial; USD 119 000 - 209 000; Tempo integral

Resumo da oferta

Amazon.com Services LLC is seeking a Senior Security Risk Specialist within the BXT Risk team to lead third-party vendor risk assessments for US health and financial employee benefits programs. You will evaluate security, privacy, and regulatory posture and drive scalable risk management across multiple vendors and systems.

The role requires strong collaboration with US benefits policy, process, and system owners to define strategies, assess complex risks, and implement remediation plans that

Qualificações

• Bachelor's degree or equivalent in Information Security, Computer Science, Risk Management, Engineering, Math, Statistics, or related discipline
• 7+ years of risk management, audit, legal, compliance or related field experience with external stakeholders
• Experience with IT compliance and risk management requirements (security, privacy, SOX, HIPAA)

Responsabilidades

• Lead complex third-party vendor risk assessments across benefits programs and vendors, evaluating security, privacy, and compliance posture
• Define and iterate risk assessment methodologies and frameworks to scale with diverse vendor requirements
• Identify long-term risks from third-party vendors and influence business strategy to mitigate them
• Make independent decisions on vendor engagements, audits, and regulators with minimal oversight
• Drive benefits compliance management related to third-party service delivery and regulatory requirements
• Lead risk and control assessments of vendor-managed processes and report remediation plans

Conhecimentos

Risk management

Regulatory compliance

Stakeholder communication

Formação académica

Bachelor's degree or equivalent

Descrição da oferta de emprego

Amazon.com Services LLC is seeking a Senior Security Risk Specialist within the BXT Risk team to lead third-party vendor risk assessments for US health and financial employee benefits programs. You will evaluate security, privacy, and regulatory posture and drive scalable risk management across multiple vendors and systems.

The role requires strong collaboration with US benefits policy, process, and system owners to define strategies, assess complex risks, and implement remediation plans that