IT Risk Manager, IT Risk

About This Role

This mid-level position is for an experienced IT Risk Manager within the First Line of Defense (1LoD) to enhance the IT risk management and control environment within Amazon's unique IT setting. The successful candidate will contribute to the development of a 1st Line IT Risk program across Amazon's global regulated entities, ideally with experience in the payments or financial services sector.

Responsibilities

• Contribute to the development and maintenance of the Global IT Risk Management Framework, ensuring alignment with legal entity regulatory requirements across all jurisdictions
• Design and implement IT risk controls, mitigation strategies, and remediation plans
• Assess IT risks across cloud computing infrastructure, including cloud security controls
• Support the identification and assessment of IT risks associated with the global tax compliance program, including technology controls supporting tax reporting, data flows, and regulatory obligations
• Contribute to the development and implementation of data integrity controls, including assessment of data quality risks, validation of data processing controls, and monitoring of data integrity
• Establish IT risk management policies and procedures, ensure their implementation
• Test critical applications to ensure resilience and recovery objectives set by the regulated entities are met
• Perform risk-based deep dives to identify and understand IT risk drivers and to validate root causes of IT related loss events

Requirements

• Bachelor's degree in computer science, engineering, mathematics or equivalent, or 6+ years of technical work experience
• Experience in technology risk, technology audit, within a financial institution, licensed money transmitter, or payments related e-commerce function
• A good understanding of IT risk and control frameworks: COBIT, NIST, ISO 27001, ITIL or equivalent
• Certified Information Systems Auditor (CISA) or equivalent IT auditing and risk certification
• Certified Information Security Manager (CISM), Certified in Risk and Information Systems Control (CRISC), Certified Information Systems Security Professional (CISSP) or equivalent IT Risk, Governance, Security Strategy certification
• Experience with cloud platforms risk management, cloud security, and compliance
• A good understanding of regulatory landscape
• Experience with data integrity frameworks, data quality management, or data governance
• Familiarity with IT risks related to tax compliance programs or financial reporting systems

Nice to have:

• Professional certification such as CAMS, CRCM, or CRP
• Experience using data and metrics to back up assumptions and implement effective solutions
• Experience working in risk, fraud or compliance organizations
• Master's degree or equivalent

About the Company

Amazon is a global company with a unique IT environment.