Risk Manager, Vendor Security

<div><p>Do you want to be instrumental in the success of some of Amazon’s strategic and high impact projects and programs. Risk Manager, Vendor Security works as an individual contributor, capable of contributing to the delivery of technical global programs and projects, managing stakeholders, assessing the security risk of vendors by partnering with multiple stakeholders to ensure vendors meet Amazon’s security bar. This highly visible and challenging position is self-driven, project and compliance focused, and goal oriented, with the objective of delivering business solutions that meet stakeholder needs.</p><p>The team is part of FGBS, with members based in several different countries. The team function sits within FORGE and as such, this position will work with leadership in FinOps, Vendor Management, Compliance&Controllership, and tech teams within FinOps to build and deliver high impact global programs and projects.</p><h3>Key Job Responsibilities</h3><ul><li>Security Assessments: Acting as subject matter expert on technology implementation, changes, and risk‑based security reviews and assessments. Performing security reviews, remediating risk and exception management. Collecting/reviewing data from multiple sources to assess a third party’s security. Building, evolving, and improving sustainable processes and measurement systems to ensure that security policy requirements are maintained. Serving as an advisor on security&compliance issues for tech and operations teams.</li><li>Internal project and program management: Contribute to technical global projects from annual program roadmaps and/or ad‑hoc requests from stakeholders, including all end‑to‑end stages of project management, from business requirements gathering and scoping to change management and delivery.</li><li>Vendor‑facing project management: Work with external vendors on global projects, ensuring Amazon FinOps business needs are met while also balancing business&risk agreements between all stakeholders and customers.</li><li>Reporting: Prep reports on set cadences to share the status of ongoing projects, programs, and goal completion/progress (e.g., MBR, QBR, monthly updates).</li><li>Goals and roadmap planning: Provide input on the creation of annual program roadmaps and goals supported by the team.</li><li>Stakeholder management: Manage communication with both internal and external stakeholders and support them through the delivery of projects.</li><li>Documentation: Provide support on the creation of standard operating procedures (SOP), frameworks, and project documentation, among others.</li></ul><h3>Basic Qualifications</h3><ul><li>3+ years of compliance program management, legal, governance, audit, risk/loss prevention, or equivalent experience.</li><li>Bachelor’s degree or equivalent.</li><li>5+ years of any combination of the following: application security frameworks, identity and access controls, incident response, mobile security, cloud computing and security, AI security, threat intelligence, and penetration testing experience.</li><li>Experience in change/stakeholder management and project documentation (e.g., contributing to project playbooks, building schedules, managing issues/risks, establishing communication plans and stakeholder engagement).</li></ul><h3>Preferred Qualifications</h3><ul><li>Professional auditing qualification or similar risk or compliance credentials.</li><li>Experience with SQL and Excel.</li></ul><p>Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.</p><p>Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.</p></div>#J-18808-Ljbffr