IT Risk Manager, IT Risk

This is a mid-level position ideal for candidates looking to grow their career in IT Risk Management.

Are you an Information Technology (IT) Risk Manager ready for a step-up role with within Amazons unique IT environment We are looking for an experienced IT Risk Manager within the First Line of Defense (1LoD) to enhance our IT risk management and control environment. Reporting to the Senior IT Risk Manager the successful candidate will contribute to the development of a 1st Line IT Risk program across Amazon global regulated entities. The ideal candidate must have IT risk management experience preferably within the payments or financial services sector.

Key job responsibilities
Contribute to the development and maintenance of the Global IT Risk Management Framework ensuring alignment with legal entity regulatory requirements across all jurisdictions.
Design and implement IT risk controls mitigation strategies and remediation plans.
Assess IT risks across cloud computing infrastructure including cloud security controls.
Support the identification and assessment of IT risks associated with the global tax compliance program including technology controls supporting tax reporting data flows and regulatory obligations.
Contribute to the development and implementation of data integrity controls including assessment of data quality risks validation of data processing controls and monitoring of data integrity.
Establish IT risk management policies and procedures ensure their implementation.
Test critical applications to ensure resilience and recovery objectives set by the regulated entities are met.
Perform risk based deep dives to identify and understand IT risk drivers and to validate root causes of IT related loss events.


- Bachelors degree or equivalent
- 7 years of leading financial technology automation with tech and non-tech teams experience or a Bachelors degree and 7 years of developing internet products and technologies experience
- Knowledge of IT best practice frameworks (ITIL COBIT) and operational excellence concepts or methodologies
- Experience with IT compliance and risk management requirements (e.g. security privacy SOX HIPAA etc.)
- Degree in Computer Science IT Engineering related technical field or equivalent combination of education and relevant work experience.
- Experience in enterprise risk management (ERM) regulatory compliance and strategic risk oversight.

- Professional auditing qualification or similar risk or compliance credentials
- Certified Information Systems Auditor (CISA) or equivalent IT auditing and risk certification.
- Certified Information Security Manager (CISM) Certified in Risk and Information Systems Control (CRISC) Certified Information Systems Security Professional (CISSP) or equivalent IT Risk Governance Security Strategy certification.

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process including support for the interview or onboarding process please visit for more information. If the country/region youre applying in isnt listed please contact your Recruiting Partner.