IT Risk and Compliance Manager

Amazon Web Services, Inc. seeks a Controls Manager to design, implement, and enhance IT and cloud control frameworks that safeguard AWS services at scale. You will assess risks, define and test controls, and partner with engineering, security, and operations teams to close gaps and automate monitoring. Responsibilities include leading control reviews, supporting audits (SOX, SOC, ISO), creating clear documentation, and presenting results to senior leaders. You'll thrive in AWS's customer-obsessed, data-driven culture, working on complex global challenges while learning cutting-edge cloud technologies and growing your ownership and impact.

Responsibilities

• Design, implement, and maintain IT and cloud control frameworks for AWS services
• Assess technology and process risks and define effective mitigating controls
• Plan and execute control testing and continuous monitoring activities
• Support internal and external audits, including SOX, SOC, and ISO assessments
• Document processes, risks, and controls in clear, scalable artifacts
• Partner with engineering, security, and operations teams to remediate control gaps
• Drive automation and tooling to improve efficiency of control monitoring
• Develop metrics and reporting to communicate control health to leadership
• Advise stakeholders on control implications of new products and changes
• Contribute to continuous improvement of risk and compliance programs

Required Skills

• IT general controls (ITGC) design and assessment
• Cloud security and compliance (AWS preferred)
• Risk assessment and control testing
• SOX, SOC, and regulatory compliance frameworks
• ISO 27001 / NIST / COBIT controls frameworks
• Data analysis and reporting (Excel, SQL or similar)
• Process documentation and controls mapping
• Stakeholder and project management
• Audit remediation and issue tracking
• Automation and tooling for control monitoring