💼 IT Risk Manager, IT Risk | Amazon
🏢 Company: Amazon
🔐 IT Risk | Governance & Compliance
📝 About the Role
Amazon is looking for an experienced IT Risk Manager within the First Line of Defense (1LoD) to enhance its IT risk management and control environment.
Reporting to the Senior IT Risk Manager, the successful candidate will contribute to the development of a 1st Line IT Risk program across Amazon global regulated entities. Experience in IT risk management, preferably within the payments or financial services sector, is preferred.
🎯 Key Responsibilities
- Contribute to the development and maintenance of the Global IT Risk Management Framework, ensuring alignment with legal entity regulatory requirements across jurisdictions.
- Design and implement IT risk controls, mitigation strategies, and remediation plans.
- Assess IT risks across cloud computing infrastructure, including cloud security controls.
- Support identification and assessment of IT risks associated with the global tax compliance program, including technology controls supporting tax reporting, data flows, and regulatory obligations.
- Contribute to the development and implementation of data integrity controls, including assessment of data quality risks, validation of data processing controls, and monitoring of data integrity.
- Establish IT risk management policies and procedures and ensure their implementation.
- Test critical applications to ensure resilience and recovery objectives set by regulated entities are met.
- Perform risk-based deep dives to identify and understand IT risk drivers and validate root causes of IT-related loss events.
🎓 Basic Qualifications
- Bachelor's degree or equivalent.
- 7+ years of leading financial technology automation with technical and non-technical teams, or a Bachelor's degree and 7+ years of developing internet products and technologies experience.
- Knowledge of IT best-practice frameworks such as ITIL and COBIT and operational excellence concepts or methodologies.
- Experience with IT compliance and risk management requirements such as security, privacy, SOX, HIPAA, and related areas.
- Degree in Computer Science, IT, Engineering, related technical field, or equivalent combination of education and relevant work experience.
- Experience in enterprise risk management (ERM), regulatory compliance, and strategic risk oversight.
🛠️ Preferred Qualifications & Skills
- Professional auditing qualification or similar risk/compliance credentials.
- Certified Information Systems Auditor (CISA) or equivalent IT auditing and risk certification.
- Certified Information Security Manager (CISM).
- Certified in Risk and Information Systems Control (CRISC).
- Certified Information Systems Security Professional (CISSP).
- IT Risk, Governance, Security Strategy, and Compliance.
🎁 Career Exposure
- Exposure to global IT risk management programs and regulated entities.
- Opportunity to work across IT risk, controls, compliance, cloud infrastructure, and data integrity.
- Experience with enterprise risk management and regulatory requirements.
- Opportunity to contribute to First Line of Defense IT risk programs.
🚀 Why Join Amazon?
This opportunity is suited for IT Risk professionals looking to contribute to a global IT risk management and control environment, with exposure to cloud infrastructure, regulatory compliance, data integrity, resilience, and enterprise risk management.
💡 Core Skills
IT Risk Management
Risk & Compliance
IT Governance
ITIL
COBIT
Cloud Security
Enterprise Risk Management
Regulatory Compliance
Data Integrity
Risk Controls
IT Audit
CISA / CISM / CRISC
🎯 Interview Preparation
- Revise IT risk management frameworks and First Line of Defense concepts.
- Prepare examples of designing IT risk controls, mitigation strategies, and remediation plans.
- Understand ITIL and COBIT frameworks and their application in IT governance.
- Prepare examples involving cloud infrastructure and cloud security controls.
- Be ready to discuss IT compliance, regulatory requirements, security, privacy, SOX, and related controls.
- Understand data integrity risks, data processing controls, and data quality assessment.
- Prepare examples of application resilience, recovery objectives, and risk-based testing.
- Be prepared to explain how you conduct risk-based deep dives and identify root causes of IT-related loss events.
🚀 How to Apply
Interested and eligible candidates can apply for the IT Risk Manager position through the official Amazon Jobs application page.