We are seeking an experienced Risk Manager to join the Risk Management Excellence (RMX) team at AWS. This role is responsible for managing customer security audit (CSA) requests and regulatory inquiries, serving as the primary point of contact for interpreting, scoping, and responding to audit and regulatory demands across a complex global risk landscape. The ideal candidate brings deep familiarity with Enterprise Risk Management (ERM) and Third-Party Risk Management (TPRM) frameworks, and a nuanced understanding of the regulatory regimes that govern AWS operations worldwide.

Key job responsibilities
Serve as the primary owner for inbound customer audit requests and regulatory inquiries, ensuring responses are accurate, appropriately scoped, and delivered on time. Interpret audit and regulatory requests through the lens of AWS's ERM and TPRM programs to ensure responses are neither over-disclosed nor under-responsive. Maintain working knowledge of key regulatory regimes impacting AWS globally, including DORA (EU), UKCTP (UK), and FBAs (US), and any regime requiring ERM or TPRM program involvement. Own end-to-end tracking of all active audit and regulatory requests, maintaining a centralized log with status, owners, deadlines, and escalation flags. Drive accountability across stakeholders through structured project management practices. Collaborate cross-functionally with Legal, Compliance, Security, and Finance teams to gather and validate response content. Identify patterns across audit requests to surface systemic risks or documentation gaps, and contribute to the development of reusable response frameworks to improve efficiency and consistency.

A day in the life
You'll triage incoming customer audit requests and regulatory inquiries, assessing each against AWS's ERM and TPRM programs to determine scope and stakeholders. You'll collaborate with Legal, Compliance, Security, and Finance teams to finalize responses to regulators and customers, ensuring precision and appropriate disclosure. You'll maintain a centralized tracking log, escalating complex or time-sensitive requests as needed. You'll deep-dive into program documentation to craft response templates and identify process improvements. You'll monitor regulatory developments globally to stay ahead of emerging requirements that could impact AWS's audit response posture.

About the team
The Risk Management Excellence (RMX) team within AWS FGBS serves as the central hub for enterprise risk management across AWS. We partner with Legal, Compliance, Security, Finance, and business teams to ensure coordinated risk management at scale. The team is collaborative, intellectually curious, and committed to operational excellence. You'll work alongside risk managers, compliance specialists, and program managers building scalable risk frameworks in one of the world's most dynamic and regulated technology environments. This is a high-visibility role with direct impact on AWS's regulatory relationships and customer trust.