Do you want to be instrumental in the success of some of Amazon’s strategic and high impact projects and programs. Risk Manager, Vendor Security works as an individual contributor, capable of contributing to the delivery of technical global programs and projects, managing stakeholders, assessing the security risk of vendors by partnering with multiple stakeholders to ensure vendors meet Amazon’s security bar. This highly visible and challenging position is self-driven, project and compliance focused, and goal oriented, with the objective of delivering business solutions that meet stakeholder needs.

The team function sits within Finance, within the Finance Operations Risk, Governance & Experience FORGE) organization and as such, this position will work with leadership in Finance, Vendor Management, Compliance & Controllership, and Technology Teams.

Key job responsibilities
• Security Assessments: 1) Acting as subject matter expert on technology implementation, changes and risk-based security reviews and assessments. 2) Collecting/reviewing data from multiple sources to assess a third party's security. 3) Building, evolving, and improving sustainable processes and measurement systems to ensure that security policy requirements are maintained. 4) Serving as an advisor on security & compliance issues for operations staff
• Perform risk assessments of vulnerabilities and evaluating compensating and mitigating controls in large, complex infrastructures
• Internal project and program management: Contribute to technical global projects from annual program roadmaps and/or as part of ad-hoc requests from stakeholders. This includes all end to end stages of project management, from business requirements gathering and scoping to change management and delivery
• Reporting: prepares reports on given cadences to share status of ongoing projects, programs, and goals completion/progress (i.e. MBR, QBR, monthly updates, etc.)
• Goals and roadmap planning: provide input on the creation of annual program roadmaps and goals supported by the team
• Stakeholder management: manage communication with both internal and external stakeholders and support them through the delivery of projects
• Documentation: provide support on creation of standard operation procedures (SOP), frameworks, and project documentation, among others