Risk Manager II, AWS Enterprise Risk Management (ERM)

AWS Enterprise Risk Management (ERM) is seeking a Risk Specialist to join our team within Risk Management Excellence (RMX). In this role, you will help identify, assess, and manage enterprise-level risks that could affect AWS’s operations, strategy, and compliance posture.

You will support the enterprise risk assessment lifecycle, maintain and enhance the risk register, evaluate mitigating activities, and produce risk insights that informs executive decision-making. You will partner with stakeholders across AWS—including service teams, finance, legal, compliance, and security—to ensure risks are consistently identified, measured, escalated, and mitigated within a structured governance framework. The ideal candidate is analytically rigorous, detail-oriented, and comfortable working across organizational boundaries in a fast-moving cloud infrastructure environment. You bring a strong foundation in risk frameworks and a passion for translating complex risk data into clear, actionable insights for senior leaders.

Key job responsibilities You will conduct enterprise risk assessments across AWS business units, identifying emerging and evolving risks through structured interviews, data analysis, and environmental scanning. You will maintain and enhance the enterprise risk register, ensuring risk owners are assigned, ratings are current, and mitigation plans are tracked to completion. You will produce executive-level risk reports and dashboards that translate complex opportunities into clear, decision-ready insights for senior leadership. You will support regulatory compliance efforts by coordinating evidence gathering, responding to audit inquiries, and tracking remediation activities. As a cross-functional risk advisor, you will partner with service teams, finance, legal, and security to embed risk awareness into business processes and strategic planning. You will contribute to the development and maintenance of risk policies, frameworks, and methodologies aligned to industry standards. Throughout, you will look for AWS ERM opportunities to automate workflows, improve data quality, and scale the program’s reach through better tooling and processes.

A day in the life You start the day reviewing risk register updates and flagging items that need follow-up with risk owners. You shift to project work: conducting a risk assessment interview with a service team, building out a dashboard for an upcoming leadership review, or evaluating control effectiveness for a compliance inquiry. You may join a cross-functional call with Legal or Finance to align on an emerging risk theme. Refining assessment methodologies, drafting policy updates, or working with engineering on a workflow automation.

About the team Professional certifications such as CRISC, CISA, CISM, CRM, or equivalent.

• Bachelor's degree or equivalent
• Bachelor's degree or equivalent in Risk Management, Business Administration, Security Management, or a related field
• Experience in internal audit and risk management or equivalent
• Experience in risk assessment and enabling organizations to make security decisions
• Experience in written and verbal communication with the ability to present complex technical information in a clear and concise manner to executives and non-technical leaders
• Experience with data analysis tools such as Excel, Pivot Tables, macros, SQL, visualization tools - Tableau, Quicksight, etc.
• Experience coordinating cross-functional inputs, meeting deadlines, and effectively managing competing priorities