Amazon's Governance, Risk and Assurance (GRA) function is a specialist global team that provides internal advisory services operating within the second line of defence. The GRA team partners with businesses across Amazon to advise on best practices and frameworks around governance, risk management and assurance, providing independent oversight and challenge to ensure effective risk management by the first line.
We are seeking a GRA Manager to join the team. You will be responsible for managing risk programs where the risk strategy is defined but the business problem and solution may not yet be fully defined. As the risk landscape evolves with the emergence of AI/ML technologies, automation, and increasingly complex regulatory requirements, you must have both Risk/Assurance and technical skill set that combines deep governance, risk and assurance expertise with foundational technical capabilities. The role serves as a critical bridge between business stakeholders, technical teams, and senior leadership, translating complex risk information into actionable, data-driven narratives.


Key job responsibilities
• Provide assurance on the effectiveness of internal controls and develop recommendations to address any identified control gaps and weaknesses.
• Facilitate the development of new or revised policies, procedures and governance documents to strengthen the organization's risk posture.
• Advise partners on best practices and frameworks around governance, risk management and assurance, and equip them with the tools and knowledge to reduce risk within their workstream.
• Engage with internal stakeholders and businesses on a cross-border basis to develop targeted governance, risk and assurance deliverables.
• Create detailed, data-driven narratives to inform senior leadership and Boards of risk levels, mitigations and impacts.
• Manage and lead cross-functional projects and goals, driving teams and partners to meet objectives across multiple teams.
• Proactively identify opportunities to automate and simplify processes within the team and for internal clients, including process improvement and risk-mitigation methodologies such as risk assessments and Lean techniques to drive continuous improvement.
• Contribute to the team's understanding of how new technologies and regulatory developments impact the organization's risk profile, supporting the development of appropriate risk management responses.