What are the responsibilities and job description for the Risk Manager, AWS Risk Management position at Amazon Web Services (AWS)?
Description
AWS Third-Party Risk Management (TPRM) is seeking a Risk Specialist to join our team within Risk Management Excellence (RMX). In this role, you will serve as a key operator within the TPRM program, responsible for monitoring, assessing, and reporting on risks associated with AWS’s critical third-party ecosystem.
You will manage ongoing risk surveillance through the Sentinel platform, produce executive-level risk intelligence reports, support regulatory audits, lead financial viability assessments, and coordinate incident response documentation. This is a highly cross-functional role that partners with AWS service teams, legal, compliance, supply chain, and external vendors to ensure third-party risks are identified, measured, and mitigated.
The ideal candidate is a self-starter with strong analytical skills, an eye for process improvement, and comfort navigating ambiguity in a fast-moving cloud infrastructure environment.
Key job responsibilities
You will monitor third-party risk alerts and escalate issues as they arise, ensuring risks are identified and addressed quickly. You will own the monthly risk report from draft through executive distribution, and track key metrics that measure program health. You will produce on-demand risk profiles for internal stakeholders using financial intelligence platforms and AI-assisted tooling. You will lead financial viability assessments for critical vendors—collecting due diligence reviews, distributing risk surveys, and scoring financial health—while partnering with engineering to automate data collection. You will serve as the team’s point of contact for regulatory and customer audits, and document third-party incidents in coordination with security operations. You will also drive vendor reassessments, process risk nominations for new and existing third parties, and participate in launch reviews for new AWS services. Throughout, you will look for ways to streamline operations through automation, tooling improvements, and well-maintained runbooks.
A day in the life
You start the day triaging Sentinel alerts and actioning third-party risk indicators—executing overrides, updating logs, and filing tickets. Midday, you shift to project work: pulling financial health data for a viability assessment, drafting a risk summary for a stakeholder request, or coordinating audit evidence with a program manager. You may join a cross-functional call with Legal or Supply Chain on an open incident. Afternoons are for reporting and improvement—updating reassessment trackers, compiling the flash report, or partnering with engineering on an automation that saves the team hours each week.
About The Team
The Risk Management Excellence (RMX) team within AWS FGBS serves as the central hub for enterprise risk management across AWS. We partner with Legal, Compliance, Security, Finance, and business teams to ensure coordinated risk management at scale. The team is collaborative, intellectually curious, and committed to operational excellence. You'll work alongside risk managers, compliance specialists, and program managers building scalable risk frameworks in one of the world's most dynamic and regulated technology environments. This is a high-visibility role with direct impact on AWS's regulatory relationships and customer trust.
Basic Qualifications
Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.
The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits.
USA, VA, Arlington - 74,200.00 - 129,800.00 USD annually
USA, WA, Seattle - 82,700.00 - 129,800.00 USD annually
Company - Amazon.com Services LLC
Job ID: A10548626
AWS Third-Party Risk Management (TPRM) is seeking a Risk Specialist to join our team within Risk Management Excellence (RMX). In this role, you will serve as a key operator within the TPRM program, responsible for monitoring, assessing, and reporting on risks associated with AWS’s critical third-party ecosystem.
You will manage ongoing risk surveillance through the Sentinel platform, produce executive-level risk intelligence reports, support regulatory audits, lead financial viability assessments, and coordinate incident response documentation. This is a highly cross-functional role that partners with AWS service teams, legal, compliance, supply chain, and external vendors to ensure third-party risks are identified, measured, and mitigated.
The ideal candidate is a self-starter with strong analytical skills, an eye for process improvement, and comfort navigating ambiguity in a fast-moving cloud infrastructure environment.
Key job responsibilities
You will monitor third-party risk alerts and escalate issues as they arise, ensuring risks are identified and addressed quickly. You will own the monthly risk report from draft through executive distribution, and track key metrics that measure program health. You will produce on-demand risk profiles for internal stakeholders using financial intelligence platforms and AI-assisted tooling. You will lead financial viability assessments for critical vendors—collecting due diligence reviews, distributing risk surveys, and scoring financial health—while partnering with engineering to automate data collection. You will serve as the team’s point of contact for regulatory and customer audits, and document third-party incidents in coordination with security operations. You will also drive vendor reassessments, process risk nominations for new and existing third parties, and participate in launch reviews for new AWS services. Throughout, you will look for ways to streamline operations through automation, tooling improvements, and well-maintained runbooks.
A day in the life
You start the day triaging Sentinel alerts and actioning third-party risk indicators—executing overrides, updating logs, and filing tickets. Midday, you shift to project work: pulling financial health data for a viability assessment, drafting a risk summary for a stakeholder request, or coordinating audit evidence with a program manager. You may join a cross-functional call with Legal or Supply Chain on an open incident. Afternoons are for reporting and improvement—updating reassessment trackers, compiling the flash report, or partnering with engineering on an automation that saves the team hours each week.
About The Team
The Risk Management Excellence (RMX) team within AWS FGBS serves as the central hub for enterprise risk management across AWS. We partner with Legal, Compliance, Security, Finance, and business teams to ensure coordinated risk management at scale. The team is collaborative, intellectually curious, and committed to operational excellence. You'll work alongside risk managers, compliance specialists, and program managers building scalable risk frameworks in one of the world's most dynamic and regulated technology environments. This is a high-visibility role with direct impact on AWS's regulatory relationships and customer trust.
Basic Qualifications
- Bachelor's degree or equivalent
- 3 years of compliance program management, legal, governance, audit, risk/loss prevention, or equivalent experience
- Demonstrated understanding of ERM and/or TPRM frameworks
- Professional auditing qualification, or similar risk or compliance credentials
- Experience with SQL and Excel
- Familiarity with one or more of the following regulatory regimes: DORA, UKCTP, US Federal Banking Agency requirements, or equivalent financial services regulations
Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.
The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits.
USA, VA, Arlington - 74,200.00 - 129,800.00 USD annually
USA, WA, Seattle - 82,700.00 - 129,800.00 USD annually
Company - Amazon.com Services LLC
Job ID: A10548626