Risk Manager, Amazon

• Experience leveraging technology to drive process improvements
• Bachelor's degree or equivalent
• Experience in auditing, risk management, compliance, program management, or quality management systems
• Experience designing or operating independent assurance, monitoring, or oversight functions

Desirable

• Amazon's Global Operations Enterprise Services (GOES) Compliance & Data Integrity (CDI) vertical is seeking a talented and motivated Risk Manager to support the Compliance Second Line of Defense (2LOD) function
• CDI's 2LOD exists to provide continuous, independent verification that compliance standards are being met accurately, completely, and consistently across CDI's full infrastructure portfolio, operating between Internal Audit cycles to ensure the organization maintains a live, defensible compliance posture rather than a point-in-time snapshot
• This role owns the lifecycle of complex cross-functional compliance assurance programs, translating audit findings and continuous monitoring results into sustainable compliance improvements across 200+ jurisdictions and 4K+ facilities
• This is an individual contributor role on a globally dispersed team
• A successful candidate will be a self-directed senior IC who thrives in ambiguity, taking unfamiliar problems, defining the right approach and delivering the outcome without a prescribed playbook
• They have demonstrated experience managing complex compliance or audit programs with limited guidance, partnering with legal and regulatory stakeholders, and influencing business and technology decisions across organizational boundaries
• The candidate must be able to define program objectives, drive measurable risk reduction, and represent compliance programs credibly to senior internal and external audiences
• Program Ownership & Execution
• Own the lifecycle of one or more complex compliance assurance programs, from scoping and continuous monitoring design through finding remediation and closure, ensuring alignment with CDI's compliance strategy and the organization's portfolio-wide assurance posture
• Manage parallel workstreams across geographies, identifying and resolving cross-stream dependencies before they become blockers
• Define program objectives, establish KPIs, and drive measurable improvements in compliance health, control effectiveness, and find remediation timeliness across the portfolio
• Manage assurance activities and audit fieldwork support across assigned program areas, ensuring timely, accurate, and auditable responses to both Internal Audit and independent monitoring requirements
• Streamline and eliminate excess processes and controls in assurance workflows, creating predictable, scalable verification paths that improve portfolio-wide coverage
• Oversee the rollout of controls and testing mechanisms, measuring their effectiveness and ensuring findings are treated as system improvement inputs rather than one-time corrections
• Drive toward automated assurance execution within your program scope, identifying opportunities to reduce reliance on manual workflows and fragmented documentation standards Risk Assessment & Decision Support
• Assess complex risks surfaced through assurance findings and translate them into actionable remediation plans with clear ownership, timelines, and success metrics that feed back into compliance execution priorities
• Use lateral thinking to navigate problems where obvious path is blocked, surfacing alternative approaches the team has not considered
• Provide long-term perspective on risk-related business and technology decisions, helping partner teams prioritize remediation efforts against operational demands
• Balance operational continuity against compliance requirements when developing control recommendations, ensuring the portfolio maintains continuous coverage rather than episodic readiness
• Use data to recommend risk tolerance levels, exercising judgment on which decisions to escalate to the function lead (high-stakes, cross-team, one-way doors) and which to make independently, while flagging gaps in risk assessment methodology Cross-Functional Partnership
• Partner with CDI functions to ensure assurance submissions reflect accurate, auditable evidence of control execution at portfolio scale
• Ensure that findings from your program area inform both compliance execution priorities and data governance decisions, contributing to a closed-loop improvement cycle
• Contribute to risk-related policies, internal service agreements, and assurance frameworks within your program area
• Influence technology and product teams to embed continuous assurance workflows into operational systems, reducing dependence on manual evidence gathering
• Represent CDI's compliance posture to Internal Audit during audit cycles, and where applicable, to external auditors and regulatory examiners, with the confidence and credibility of an independent assurance function
• Build strong working relationships with remote colleagues across time zones Communication & Stakeholder Management
• Write clear, compelling narratives and present assurance findings, remediation progress, and portfolio-level compliance health to Directors and VPs
• Manage program-level communications to ensure leaders and stakeholders have access to current compliance posture data, not historical snapshots
• Facilitate crisp decision-making by driving structured stakeholder discussions that resolve ambiguity, unblock remediation progress, and surface systemic compliance gaps Process Improvement & Operational Excellence
• Identify gaps between regions, processes, and organizations in assurance coverage and drive sustainable improvements that extend portfolio-wide visibility
• Develop and maintain metrics that track continuous compliance health, finding closure rates, and remediation effectiveness across your program scope
• Apply data analytics to identify recurring finding patterns and proactively address root causes, preventing the same compliance gaps from surfacing across audit cycles
• Actively mentor and develop team members; contribute to hiring and peer promotion assessments