Sr. IT Risk Manager, Risk and Compliance Solution

Amazon Payments is growing fast and the Regulated Payments Risk team is building out Risk Management support for our regulated payments products across the globe. We're looking for a seasoned IT Risk manager to help continue to drive maturity in our IT Risk programs and controls. This role will look at EU, UK, MENA, NA and SA regulatory jurisdictions and payments products at Amazon to ensure a multi-disciplinary IT risk management function. We want someone ready to partner across our technology and security engineering groups to identify and manage areas of risk. The right person will get the opportunity to leverage and grow your technology risk skills, expand your knowledge and work within a fast paced and exciting environment., Risk Management Expert: Experienced specialist in information technology risk management, including cybersecurity principles, cloud strategies, payment technologies (preferable) and IT operational processes.
Risk Appetite: Oversee risk appetite metrics, KRIs, and other monitoring to ensure Risk Tolerances are appropriately monitored in each region.
Risk Position and Profile: Implement detailed, data driven narratives to inform leadership of risk profile related to a variety of IT Risk and Security topics. Conduct risk assessments. Provide risk position and challenge on new products, changes, and risk remediation efforts.
Regulatory Awareness: Apply expert risk-based guidance on adherence to Information Technology and Cybersecurity risk-related regulations from the CSSF, FCA, NYDFS, and other applicable regulatory bodies.
Influencer: Build and maintain relationships with key business and operational stakeholders, serving as a credible challenger regarding Amazon Payments Information Technology and Cybersecurity Risk treatment.
Responsibilities:
- Provide credible challenge across all information, technology, and cybersecurity risks both enabling business growth while maintaining related risks within appetite.
- Influence global payments technology risk management policies and frameworks to ensure requirements for regulations are met. Update global IT risk policies in each region by supporting policies and ensuring compliance with standards.
- Oversee and drive first line remediation of IT exceptions which are outside of risk appetite.
- Assess key controls and provide IT risk and governance feedback on key projects.
Provide subject matter expertise in terms of best practice, ICT regulatory requirements, IT resiliency plans and risk mitigation.
- Maintain strong relationships with key technology teams and work with these teams to gain a good understanding of the IT architecture to provide a view of the IT risk profile for region.
- Review controls relating to information, technology, and cybersecurity risks.
- Perform deep dives on technology compliance-related processes and systems.
- Identify system limitations that could lead to regulatory risks in new products and services, and provide guidance for resolution and risk mitigation.
- Investigate IT operational risk events and incidents, ensuring root cause analysis and remediation of controls, where required.
- Provide advice to stakeholders regarding the remediation of IT audit findings and implementation of recommended actions.

Experience in compliance, audit or risk management
- Bachelor's degree or equivalent
- - Bachelor's degree in Management Information Systems, Computer Science, or related field, or relevant industry experience
- - 7+ years of progressive experience in information security, cybersecurity, and/or privacy risk
- - Experience with regulatory requirements, financial services technology, or payments systems
- - Skilled in risk management and making complex business/risk trade-off recommendations and decisions
- - Background in security compliance, IT risk management and technical frameworks
- - Experience in analyzing large data sets
- - Understanding of system development lifecycles
- - Excellent written and verbal communication skills, Master's degree or equivalent
- Highly value payments systems experience
- Second line risk management
- EU/UK IT Risk experience including multiple regulatory jurisdictions
- Relevant Industry Certifications (CISSP, CISA etc.)
- Experience with IT risk frameworks (e.g., NIST, ISO 2700X)

Amazon is an equal opportunities employer. We believe passionately that employing a diverse workforce is central to our success. We make recruiting decisions based on your experience and skills. We value your passion to discover, invent, simplify and build. Protecting your privacy and the security of your data is a longstanding top priority for Amazon. Please consult our Privacy Notice (https://www.amazon.jobs/en/privacy_page) to know more about how we collect, use and transfer the personal data of our candidates.