Risk Manager, AWS Risk Management

About the role

AWS Third-Party Risk Management (TPRM) is seeking a Risk Specialist to join our team within Risk Management Excellence (RMX). In this role, you will serve as a key operator within the TPRM program, responsible for monitoring, assessing, and reporting on risks associated with AWS’s critical third-party ecosystem. You will manage ongoing risk surveillance through the Sentinel platform, produce executive-level risk intelligence reports, support regulatory audits, lead financial viability assessments, and coordinate incident response documentation. This is a highly cross-functional role that partners with AWS service teams, legal, compliance, supply chain, and external vendors to ensure third-party risks are identified, measured, and mitigated. The ideal candidate is a self-starter with strong analytical skills, an eye for process improvement, and comfort navigating ambiguity in a fast-moving cloud infrastructure environment.

Responsibilities

• Monitor third-party risk alerts and escalate issues as they arise, ensuring risks are identified and addressed quickly.
• Own the monthly risk report from draft through executive distribution, and track key metrics that measure program health.
• Produce on-demand risk profiles for internal stakeholders using financial intelligence platforms and AI-assisted tooling.
• Lead financial viability assessments for critical vendors—collecting due diligence reviews, distributing risk surveys, and scoring financial health—while partnering with engineering to automate data collection.
• Serve as the team’s point of contact for regulatory and customer audits, and document third-party incidents in coordination with security operations.
• Drive vendor reassessments, process risk nominations for new and existing third parties, and participate in launch reviews for new AWS services.
• Look for ways to streamline operations through automation, tooling improvements, and well-maintained runbooks.

A typical day includes triaging Sentinel alerts and actioning third-party risk indicators, pulling financial health data for viability assessments, drafting risk summaries for stakeholder requests, coordinating audit evidence with program managers, joining cross‑functional calls with Legal or Supply Chain on open incidents, updating reassessment trackers, compiling flash reports, and partnering with engineering on automations that save the team time.

Requirements

• Bachelor's degree or equivalent
• 3+ years of compliance program management, legal, governance, audit, risk/loss prevention, or equivalent experience
• Demonstrated understanding of ERM and/or TPRM frameworks

Qualifications

• Professional auditing qualification, or similar risk or compliance credentials
• Experience with SQL and Excel
• Familiarity with one or more of the following regulatory regimes: DORA, UKCTP, US Federal Banking Agency requirements, or equivalent financial services regulations

Benefits

• Health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage)
• 401(k) matching
• Paid time off
• Parental leave
• Sign-on payments and restricted stock units (RSUs)

Pay

USA, VA, Arlington: $74,200.00 - $129,800.00 USD annually

USA, WA, Seattle: $82,700.00 - $129,800.00 USD annually