Third-Party Risk Specialist — Cloud & TPRM

Amazon; Arlington (VA); On-site; USD 95,000 - 135,000; Full time

Job summary

Amazon.com Services LLC is seeking a Risk Specialist for the AWS Third-Party Risk Management (TPRM) team within Risk Management Excellence (RMX). You will monitor, assess, and report on risks in AWS’s third-party ecosystem, managing risk through Sentinel, and supporting audits and vendor assessments.

You will partner with legal, compliance, supply chain, and engineering to identify, measure, and mitigate third-party risks in a fast-moving cloud environment.

Qualifications

• Bachelor's degree or equivalent.
• 3+ years of compliance program management, governance, audit, risk/loss prevention, or equivalent experience.
• Demonstrated understanding of ERM and/or TPRM frameworks.

Responsibilities

• Monitor third-party risk alerts and escape issues as they arise, ensuring risks are identified and addressed quickly.
• Own the monthly risk report from draft through executive distribution, and track key metrics that measure program health.
• Produce on-demand risk profiles for internal stakeholders using financial intelligence platforms and AI-assisted tooling.
• Lead financial viability assessments for critical vendors—collecting due diligence reviews, distributing risk surveys, and scoring financial health—while partnering with engineering to automate data collection.
• Serve as the team’s point of contact for regulatory and customer audits, and document third-party incidents in coordination with security operations.
• Drive vendor reassessments, process risk nominations for new and existing third parties, and participate in launch reviews for new AWS services.
• Look for ways to streamline operations through automation, tooling improvements, and well-maintained runbooks.

Skills

Risk management

Compliance

ERM

TPRM

Regulatory

Education

Bachelor's degree or equivalent

Tools

SQL

Excel

Job description

Amazon.com Services LLC is seeking a Risk Specialist for the AWS Third-Party Risk Management (TPRM) team within Risk Management Excellence (RMX). You will monitor, assess, and report on risks in AWS’s third-party ecosystem, managing risk through Sentinel, and supporting audits and vendor assessments.

You will partner with legal, compliance, supply chain, and engineering to identify, measure, and mitigate third-party risks in a fast-moving cloud environment.