IT Audit Manager, Technology Risk

About the role

This role offers the chance to partner with Amazon’s business and engineering teams to identify risks, solve complex problems, and drive meaningful improvements. As an IT Audit Manager, you will lead operational and technical audits across diverse businesses, providing independent insights that help strengthen controls, improve processes, and support sound decision-making. You will plan, execute, and report risk-based audits, develop a deep understanding of complex business processes, technologies, and regulatory requirements, and work closely with engineers, product leaders, and business stakeholders to evaluate risks and translate them into practical, business-focused recommendations.

Travel of up to 10–20%, including international travel, may be required.

Responsibilities

• Lead a portfolio of audits: Plan, scope, and deliver multiple concurrent audits and advisory engagements across different business areas, balancing depth with efficiency and adapting to shifting business priorities.
• Own the audit roadmap for your sub-portfolio: Conduct continuous risk assessments, identify the highest-impact audit topics, and influence the team's annual audit plan.
• Manage and develop auditors: Direct the work of audit teams, including Senior IT Auditors and IT Auditors. Coach team members, set the bar for quality, and grow the next generation of audit leaders.
• Understand the business behind the systems: Develop and maintain a clear view of how products and platforms operate, generate value, and scale—and where failures would have the greatest impact.
• Assess risk in context: Evaluate areas such as access management, data security, system reliability, software development practices, and emerging-technology controls, focusing on what truly matters to the business.
• Use data to inform conclusions: Apply analytical thinking and direct (or oversee) data analysis to identify trends, validate controls, and support risk assessments at scale.
• Translate technical and business issues into business impact: Clearly articulate how risks affect customers, revenue, regulatory exposure, or operational performance for audiences ranging from engineers to the Audit Committee.
• Influence and partner with senior stakeholders: Build relationships with VPs, Directors, and senior engineering leaders. Drive alignment on risks and practical, scalable solutions, even where stakeholders push back.
• Drive meaningful outcomes: Ensure audit findings lead to real improvements, not just reports. Hold a high bar for closure and validate that risks have been mitigated.
• Raise the bar for the team: Contribute to audit methodology, team operating mechanisms, and the development of audit standards.
• Act as an excellent project manager, working independently to conduct audits from beginning to end, manage stakeholders, and handle multiple projects simultaneously.
• Demonstrate exceptional analytical skills to identify problems and address root causes.
• Prioritize effectively and drive cross-functional remediation efforts, focusing on the highest risks and ensuring problems stay fixed.
• Dive deep to identify root causes of control gaps, inefficiencies, and exceptions.
• Deliver on the highest standards by challenging assumptions and supporting findings with data.
• Identify opportunities to improve, automate, standardize, or simplify Internal Audit tools and processes.
• Advocate for a culture of risk management, strong controls, and effective operations.
• Communicate complicated technical issues succinctly and clearly in writing.
• Quickly become familiar with stakeholders' business challenges and risks, acting as a trusted advisor while leading change and navigating ambiguity among cross-functional teams.

Qualifications

Basic Qualifications

• Bachelor's degree in Computer Science, Computer Engineering, Economics, Engineering, Information Management, Information Systems, or other related discipline.
• 8+ years of experience in roles involving technology and commercial/financial acumen, finance/tech business partnering, IT audit, risk management, information security, business or tech consulting, or related fields.
• Advanced knowledge of Microsoft Office products and applications (especially MS Excel and Word).

Preferred Qualifications

• 10+ years of experience in IT audit, risk management, information security, technology consulting, or related fields.
• Master's degree in Engineering, Financial, or Economics disciplines.
• Familiarity with modern technology environments (Cloud, distributed systems, data platforms).
• Experience with AI/ML systems, including generative AI tools and platforms.
• Experience using data and analytics to drive business decisions and outcomes.
• Experience in consulting, Big 4, or large technology companies.
• Relevant certifications (e.g., CISA, CIA, CPA, CISSP).
• Understanding of control frameworks (e.g., COSO, COBIT, ISO, NIST), with a pragmatic approach to applying them.

About the Team

Our team leads Internal Audit for Amazon’s new and fast-growing businesses—Devices, Advertising, Media & Entertainment, AGI/Annapurna, and all Corporate Functions. We audit across a wide range of business risks spanning Financial, Regulatory, Reputational, Operational, and Technical Efficiency.

Pay

The base salary range for this position in Seattle, WA is $121,200 - $163,900 USD annually. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location.

Benefits

• Comprehensive health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance, and optional supplemental life plans).
• Employee Assistance Program (EAP) and Mental Health Support.
• Medical Advice Line.
• Flexible Spending Accounts.
• Adoption and Surrogacy Reimbursement coverage.
• 401(k) matching.
• Paid time off and parental leave.