IT Risk Manager, IT Risk

This is a mid-level position ideal for candidates looking to grow their career in IT Risk Management.

Are you an Information Technology (IT) Risk Manager ready for a step-up role with within Amazon's unique IT environment? We are looking for an experienced IT Risk Manager within the First Line of Defense (1LoD) to enhance our IT risk management and control environment. Reporting to the Senior IT Risk Manager, the successful candidate will contribute to the development of a 1st Line IT Risk program across Amazon global regulated entities. The ideal candidate must have IT risk management experience, preferably, within the payments or financial services sector.

Key job responsibilities

• Contribute to the development and maintenance of the Global IT Risk Management Framework, ensuring alignment with legal entity regulatory requirements across all jurisdictions.
• Design and implement IT risk controls, mitigation strategies, and remediation plans.
• Assess IT risks across cloud computing infrastructure, including cloud security controls.
• Support the identification and assessment of IT risks associated with the global tax compliance program, including technology controls supporting tax reporting, data flows, and regulatory obligations.
• Contribute to the development and implementation of data integrity controls, including assessment of data quality risks, validation of data processing controls, and monitoring of data integrity.
• Establish IT risk management policies and procedures, ensure their implementation.
• Test critical applications to ensure resilience and recovery objectives set by the regulated entities are met.
• Perform risk based deep dives to identify and understand IT risk drivers and to validate root causes of IT related loss events.

### Basic qualifications

• Bachelor's degree in computer science, engineering, mathematics or equivalent, or 6+ years of technical work experience
• Experience in technology risk, technology audit, within a financial institution, licensed money transmitter, or payments related e-commerce function.
• A good understanding of IT risk and control frameworks: COBIT, NIST, ISO 27001, ITIL or equivalent.
• Certified Information Systems Auditor (CISA) or equivalent IT auditing and risk certification.
• Certified Information Security Manager (CISM), Certified in Risk and Information Systems Control (CRISC), Certified Information Systems Security Professional (CISSP) or equivalent IT Risk, Governance, Security Strategy certification.
• Experience with cloud platforms risk management, cloud security, and compliance