Internal Audit Manager, AWS Infrastructure Operations

Job description

At Amazon we're working to be the most customer-centric company on earth, and that includes protecting our customers and their data. To get there, we need exceptionally talented, and driven people. Global Internal Audit is a fast paced, dynamic team. We are one of many mechanisms at the company with the aim of continuous improvement. We focus on business and operational processes and the technologies that support them, looking for risks that could harm the company.

We seek an Internal Audit Manager to join our AWS Internal Audit team and own the Infrastructure audit domain — covering data centers and operational infrastructure that underpins AWS's global cloud platform.

You will be part of a team that values business depth, technical curiosity, and the ability to connect audit findings to business outcomes. The ideal candidate brings strong finance and accounting experience and can assess how infrastructure controls impact revenue integrity, financial reporting, and operational resilience.

This is a high-visibility role where you will lead the planning, scoping, execution, and reporting of audits across AWS's infrastructure operations. You will dig deep into complex business and technical environments, identify the full range of risks, and translate them into actionable findings for senior leadership — including the CFO and Audit Committee of the Board of Directors.

To be successful in this role, you will demonstrate high judgement, clear communication and a consistent track record of delivering results. You will thrive in a fast-paced environment, work autonomously in an ambiguous environment, and understand the importance of operationalizing key mechanisms and management reporting related to quality and professional practice standards.

Up to 20% travel may be required, including international travel.

This role can be based in Seattle or Arlington.

Key job responsibilities

- Lead end-to-end audits from risk assessment and scoping through fieldwork, reporting, and remediation tracking — managing multiple concurrent engagements

- Design and execute Risk & Control Matrices (RCMs) for infrastructure-related audits, ensuring testing objectives are aligned with the most significant risks

- Draft audit findings that clearly articulate the risk, control gap, root cause, business impact, and recommended remediation — with proper context for both the audit report and Audit Committee (AC) memo

- Ensure all deliverables meet Internal Audit's quality bar with minimal revision