IT Audit Manager, Technology Risk

Are you excited by the opportunity to partner with Amazon's business and engineering teams to identify risks, solve complex problems, and drive meaningful improvements? This role offers the chance to apply technical expertise, risk assessment, and data analytics skills while gaining exposure to a broad range of innovative businesses and technologies.

We are seeking an experienced IT Audit Manager to join our Devices, Advertising, and Media & Entertainment Internal Audit team. In this high-visibility role, you will lead operational and technical audits across diverse businesses, providing independent insights that help strengthen controls, improve processes, and support sound decision-making.

You will be responsible for planning, executing, and reporting risk-based audits, developing a deep understanding of complex business processes, technologies, and regulatory requirements. Working closely with engineers, product leaders, and business stakeholders, you will evaluate risks across operations, compliance, policy, and technology, and translate those risks into practical, business-focused recommendations.

Success in this role requires strong analytical, project management, and communication skills. You must be able to navigate ambiguity, influence stakeholders, and communicate complex issues clearly to senior leadership while driving alignment on effective risk mitigation strategies. You need to be a good coach and mentor and deliver through people, as for every audit/project, you will be managing a small team of auditors.

We value intellectual curiosity, sound judgment, creativity, and a bias for action.

Travel of up to 10-20%, including international travel, may be required.

Key job responsibilities

• Is an excellent project manager who can work independently to conduct audits from beginning to end, manage stakeholders, and often managing multiple projects at the same time.
• Results-oriented leader ability to motivate, manage, and drive consensus across diverse teams
• Has exceptional analytical skills to identify problems and work on process to address the root cause of the problems.
• Is able to prioritize effectively and drive cross-functional remediation efforts focusing on the highest risks and ensure problems stay fixed.
• Is able to dive deep to identify root cause of control gaps, inefficiencies and exceptions.
• Delivers on the highest standards by challenging assumptions and supporting with data.
• Can identify opportunities to improve, automate, standardize or simplify Internal Audit tools and processes.
• Is able to support and advocate for a culture of risk management, strong controls, and effective operations.
• Is an excellent writer who can succinctly communicate complicated technical issues.
• Can quickly become familiar with stakeholders business challenges and risks and act as a trusted advisor to them while leading change, dealing with ambiguity among cross functional teams.

A day in the life

• Lead a portfolio of audits: Plan, scope, and deliver multiple concurrent audits and advisory engagements across different business areas, balancing depth with efficiency and adapting to shifting business priorities.
• Own the audit roadmap for your sub-portfolio: Conduct continuous risk assessments across your business areas, identify the highest-impact audit topics, and influence the team"s annual audit plan.
• Manage and develop auditors: Direct the work of audit teams, including Senior IT Auditors and IT Auditors. Coach team members, set the bar for quality, and grow the next generation of audit leaders.
• Understand the business behind the systems: Develop and maintain a clear view of how products and platforms operate, generate value, and scale - and where failures would have the greatest impact on customers, revenue, regulatory standing, or operations.
• Assess risk in context: Evaluate areas such as access management, data security, system reliability, software development practices, and emerging-technology controls - focusing on what truly matters to the business rather than applying controls mechanically.
• Use data to inform conclusions: Apply analytical thinking and direct (or oversee) data analysis to identify trends, validate controls, and support risk assessments at scale.
• Translate technical and business issues into business impact: Clearly articulate how risks affect customers, revenue, regulatory exposure, or operational performance - for audiences ranging from engineers to the Audit Committee.
• Influence and partner with senior stakeholders: Build standing relationships with VPs, Directors, and senior engineering leaders. Drive alignment on risks and on practical, scalable solutions, including where stakeholders push back.
• Drive meaningful outcomes: Ensure audit findings lead to real improvements, not just reports. Hold a high bar for closure and validate that risks have been mitigated.
• Raise the bar for the team: Contribute to audit methodology, team operating mechanisms, and the development of audit standards across DMAAC and broader Internal Audit.

About the team

Our teams leads Internal Audit for the new and fast growing businesses of Amazon - Devices, Advertising, Media & Entertainment, AGI/Annapurna and all the Corporate Functions. We audit across a wide gamut of business risks spanning Financial, Regulatory, Reputational, Operational & Technical Efficiency.