Risk Manager, AWS Risk Management

AWS Third-Party Risk Management (TPRM) is seeking a Risk Specialist to join our team within Risk Management Excellence (RMX). In this role, you will serve as a key operator within the TPRM program, responsible for monitoring, assessing, and reporting on risks associated with AWS's critical third-party ecosystem.

You will manage ongoing risk surveillance through the Sentinel platform, produce executive-level risk intelligence reports, support regulatory audits, lead financial viability assessments, and coordinate incident response documentation. This is a highly cross-functional role that partners with AWS service teams, legal, compliance, supply chain, and external vendors to ensure third-party risks are identified, measured, and mitigated.

The ideal candidate is a self-starter with strong analytical skills, an eye for process improvement, and comfort navigating ambiguity in a fast-moving cloud infrastructure environment.

Key job responsibilities

You will monitor third-party risk alerts and escalate issues as they arise, ensuring risks are identified and addressed quickly. You will own the monthly risk report from draft through executive distribution, and track key metrics that measure program health. You will produce on-demand risk profiles for internal stakeholders using financial intelligence platforms and AI-assisted tooling. You will lead financial viability assessments for critical vendors-collecting due diligence reviews, distributing risk surveys, and scoring financial health-while partnering with engineering to automate data collection. You will serve as the team's point of contact for regulatory and customer audits, and document third-party incidents in coordination with security operations. You will also drive vendor reassessments, process risk nominations for new and existing third parties, and participate in launch reviews for new AWS services. Throughout, you will look for ways to streamline operations through automation, tooling improvements, and well-maintained runbooks.

A day in the life

You start the day triaging Sentinel alerts and actioning third-party risk indicators-executing overrides, updating logs, and filing tickets. Midday, you shift to project work: pulling financial health data for a viability assessment, drafting a risk summary for a stakeholder request, or coordinating audit evidence with a program manager. You may join a cross-functional call with Legal or Supply Chain on an open incident. Afternoons are for reporting and improvement-updating reassessment trackers, compiling the flash report, or partnering with engineering on an automation that saves the team hours each week.

About the team

The Risk Management Excellence (RMX) team within AWS FGBS serves as the central hub for enterprise risk management across AWS. We partner with Legal, Compliance, Security, Finance, and business teams to ensure coordinated risk management at scale. The team is collaborative, intellectually curious, and committed to operational excellence. You"ll work alongside risk managers, compliance specialists, and program managers building scalable risk frameworks in one of the world"s most dynamic and regulated technology environments. This is a high-visibility role with direct impact on AWS"s regulatory relationships and customer trust.