Risk Manager II - AMZ10108334

Job description

from Amazon careers

MULTIPLE POSITIONS AVAILABLE

Employer: AMAZON.COM SERVICES LLC
Offered Position: Risk Manager II
Job Location: Austin, Texas
Job Number: AMZ10108334

Position Responsibilities:

Identify, design, develop, implement and execute new and existing processes, policies, goals, and solutions to reduce potential risks. Create schedules, identify and communicate risks to stakeholders, define risk mitigation strategies, and facilitate appropriate engineering solutions. Develop system requirements to streamline and simplify tools used to manage and enhance operational productivity, accuracy, and effectiveness for customers. Evaluate effectiveness of current or future systems. Collaborate with other departments to integrate with business systems and processes. Maintain metrics, reports, and process documentation to monitor and analyze delivery performance and key controls. Manage cross-functional teams and/or third party-vendors for implementation of project/program requirements.

Position involves security and regulatory compliance risks, specifically: information security control risks (gaps in controls protecting customer data), data localization risks (non-compliance with data residency requirements across jurisdictions), payment, healthcare and privacy security risks (e.g. vulnerabilities in digital payment systems), and regulatory non-compliance risks (failure to meet requirements of financial regulators and security standards) within cloud-based technology environments. This is accomplished by leading security compliance assessment engagements across regulatory standards for in scope global Amazon businesses across US, EU, APAC and MENA regions; analyzing regulatory requirements and mapping them to security controls within compliance platforms; conducting control testing and evaluating security artifacts; performing threat modeling and application security reviews; executing security assurance reviews; developing Generative AI and Retrieval Augmented Generation (RAG) solutions to automate compliance mapping; building automated security control monitoring using deterministic and non-deterministic testing.

The scope of managing cross-functional teams and third party vendors involves individual contributor-level authority to independently lead compliance engagements, define new security controls and test procedures, evaluate control effectiveness, identify and escalate compliance risks, and recommend remediation strategies to engineering and leadership teams. Exercises independent judgment to assess regulatory requirements, determine control applicability, prioritize risks by severity, and approve or reject assessment findings before submission to external audit facing teams. Defining engagement scope, timelines, and deliverables for security compliance projects; coordinating with payment security, enterprise controls, application security, and engineering teams; overseeing assessment progress across multiple regulatory regimes; conducting cross-functional reviews to resolve control testing queries; managing third-party vendor assessments for data center security controls and evaluating control applicability between the organization and third-party providers; tracking milestones and reporting status. For vendors, evaluates vendor security controls against regulatory requirements and escalates contractual decisions to senior management. Processes include Security Control Monitoring Automation (SCMA), Application Security Review (ASR) certification, and User Acceptance Testing (UAT) of compliance workflows. Systems include ServiceNow, Amazon Control Framework (ACF), NightWolf, Avocato, Data Classification Engine (DACE), AWS GuardDuty, and Party Rock. Products supported include digital payment and e-KYC services assessed under PCI DSS, RBI, UIDAI, CBUAE, and NESA regulatory frameworks.

Position Requirements:

Bachelor’s degree or foreign equivalent degree in Business Administration, Finance, Engineering, or a related field and one year of experience in the job offered or as a Program or Project Manager, or a related occupation. Must have one year of experience in the following skill(s): managing projects from design to implementation to meet regulatory requirements; and analyzing data utilizing Excel, Tableau, or SQL.

Amazon.com is an Equal Opportunity-Affirmative Action Employer – Minority / Female / Disability / Veteran / Gender Identity / Sexual Orientation.

40 hours / week, 8:00am-5:00pm, Salary Range $78,416/year to $129,800/year.

Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. For more information, visit:
https://www.aboutamazon.com/workplace/employee-benefits.#0000

Basic Qualifications

Position Requirements:

Bachelor’s degree or foreign equivalent degree in Business Administration, Finance, Engineering, or a related field and one year of experience in the job offered or as a Program or Project Manager, or a related occupation. Must have one year of experience in the following skill(s): managing projects from design to implementation to meet regulatory requirements; and analyzing data utilizing Excel, Tableau, or SQL.#0000

Preferred Qualifications

Please see job description and the position requirements above.

Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.