Senior Risk Manager - Network & Security Compliance

Amazon; Bellevue (WA); On-site; USD 121,000 - 164,000; Full time

Job summary

Amazon Kuiper Manufacturing Enterprises LLC is seeking a Sr. Risk Manager to own and mature the risk, controls, and compliance framework within the Global Service Compliance org, focusing on Network and Security compliance obligations.

The role requires leading enterprise-level GRC programs, assessing risks and controls, and partnering with security, legal, and compliance teams to embed proactive risk management into operations.

Qualifications

• Experience leading enterprise-level governance, risk and compliance programs.
• Experience assessing risk, internal controls, and compliance obligations.
• 6+ years of compliance, audit or risk management experience.
• Experience owning end-to-end internal control lifecycle for Network and Security compliance domains.

Responsibilities

• Create and implement a compliance control framework and own the end-to-end internal control lifecycle for Network and Security compliance domains.
• Determine appropriate testing cadence for controls, executing testing, completing quality reviews, and preparing performance reports for leadership.
• Develop strategies to identify ineffective controls and create scalable, right-sized solutions.
• Engage with internal teams and external stakeholders to proactively define and implement mitigations.
• Use high judgement to provide recommendations to solve ambiguous, complex business problems.
• Evaluate competing demands across control workstreams, regulatory timelines, and business objectives; frame trade-offs for leadership.

Skills

GRC leadership

Risk assessment

Internal controls

Regulatory compliance

Control lifecycle

Job description

Amazon Kuiper Manufacturing Enterprises LLC is seeking a Sr. Risk Manager to own and mature the risk, controls, and compliance framework within the Global Service Compliance org, focusing on Network and Security compliance obligations.

The role requires leading enterprise-level GRC programs, assessing risks and controls, and partnering with security, legal, and compliance teams to embed proactive risk management into operations.