Risk Manager II, AWS Enterprise Risk Management (ERM)

Job description

AWS Enterprise Risk Management (ERM) is seeking a Risk Specialist to join our team within Risk Management Excellence (RMX). In this role, you will help identify, assess, and manage enterprise-level risks that could affect AWS’s operations, strategy, and compliance posture.

You will support the enterprise risk assessment lifecycle, maintain and enhance the risk register, evaluate mitigating activities, and produce risk insights that informs executive decision-making. You will partner with stakeholders across AWS—including service teams, finance, legal, compliance, and security—to ensure risks are consistently identified, measured, escalated, and mitigated within a structured governance framework.

The ideal candidate is analytically rigorous, detail-oriented, and comfortable working across organizational boundaries in a fast-moving cloud infrastructure environment. You bring a strong foundation in risk frameworks and a passion for translating complex risk data into clear, actionable insights for senior leaders.

Key job responsibilities

You will conduct enterprise risk assessments across AWS business units, identifying emerging and evolving risks through structured interviews, data analysis, and environmental scanning. You will maintain and enhance the enterprise risk register, ensuring risk owners are assigned, ratings are current, and mitigation plans are tracked to completion. You will produce executive-level risk reports and dashboards that translate complex opportunities into clear, decision-ready insights for senior leadership.

You will support regulatory compliance efforts by coordinating evidence gathering, responding to audit inquiries, and tracking remediation activities. As a cross-functional risk advisor, you will partner with service teams, finance, legal, and security to embed risk awareness into business processes and strategic planning. You will contribute to the development and maintenance of risk policies, frameworks, and methodologies aligned to industry standards.

Throughout, you will look for AWS ERM

opportunities to automate workflows, improve data quality, and scale the program’s reach through better tooling and processes.

A day in the life

You start the day reviewing risk register updates and flagging items that need follow-up with risk owners.

You shift to project work

conducting a risk assessment interview with a service team, building out a dashboard for an upcoming leadership review, or evaluating control effectiveness for a compliance inquiry. You may join a cross-functional call with Legal or Finance to align on an emerging risk theme. Refining assessment methodologies, drafting policy updates, or working with engineering on a workflow automation.

About the team

Professional certifications such as CRISC, CISA, CISM, CRM, or equivalent.