IT Audit Manager - Technology Risk

Description

Are you excited by the opportunity to partner with Amazon’s business and engineering teams to identify risks, solve complex problems, and drive meaningful improvements? This role offers the chance to apply technical expertise, risk assessment, and data analytics skills while gaining exposure to a broad range of innovative businesses and technologies.

We are seeking an experienced IT Audit Manager to join our Devices, Advertising, and Media & Entertainment Internal Audit team. In this high-visibility role, you will lead operational and technical audits across diverse businesses, providing independent insights that help strengthen controls, improve processes, and support sound decision-making.

You will be responsible for planning, executing, and reporting risk-based audits, developing a deep understanding of complex business processes, technologies, and regulatory requirements. Working closely with engineers, product leaders, and business stakeholders, you will evaluate risks across operations, compliance, policy, and technology, and translate those risks into practical, business-focused recommendations.

Success in this role requires strong analytical, project management, and communication skills. You must be able to navigate ambiguity, influence stakeholders, and communicate complex issues clearly to senior leadership while driving alignment on effective risk mitigation strategies. You need to be a good coach and mentor and deliver through people, as for every audit/project, you will be managing a small team of auditors.

We value intellectual curiosity, sound judgment, creativity, and a bias for action.

Travel of up to 10–20%, including international travel, may be required.

Key job responsibilities
- Is an excellent project manager who can work independently to conduct audits from beginning to end, manage stakeholders, and often managing multiple projects at the same time.
- Results-oriented leader ability to motivate, manage, and drive consensus across diverse teams
- Has exceptional analytical skills to identify problems and work on process to address the root cause of the problems.
- Is able to prioritize effectively and drive cross-functional remediation efforts focusing on the highest risks and ensure problems stay fixed.
- Is able to dive deep to identify root cause of control gaps, inefficiencies and exceptions.
- Delivers on the highest standards by challenging assumptions and supporting with data.
- Can identify opportunities to improve, automate, standardize or simplify Internal Audit tools and processes.
- Is able to support and advocate for a culture of risk management, strong controls, and effective operations.
- Is an excellent writer who can succinctly communicate complicated technical issues.
- Can quickly become familiar with stakeholders business challenges and risks and act as a trusted advisor to them while leading change, dealing with ambiguity among cross functional teams.

A day in the life
• Lead a portfolio of audits: Plan, scope, and deliver multiple concurrent audits and advisory engagements across different business areas, balancing depth with efficiency and adapting to shifting business priorities.
• Own the audit roadmap for your sub-portfolio: Conduct continuous risk assessments across your business areas, identify the highest-impact audit topics, and influence the team's annual audit plan.
• Manage and develop auditors: Direct the work of audit teams, including Senior IT Auditors and IT Auditors. Coach team members, set the bar for quality, and grow the next generation of audit leaders.
• Understand the business behind the systems: Develop and maintain a clear view of how products and platforms operate, generate value, and scale — and where failures would have the greatest impact on customers, revenue, regulatory standing, or operations.
• Assess risk in context: Evaluate areas such as access management, data security, system reliability, software development practices, and emerging-technology controls — focusing on what truly matters to the business rather than applying controls mechanically.
• Use data to inform conclusions: Apply analytical thinking and direct (or oversee) data analysis to identify trends, validate controls, and support risk assessments at scale.
• Translate technical and business issues into business impact: Clearly articulate how risks affect customers, revenue, regulatory exposure, or operational performance — for audiences ranging from engineers to the Audit Committee.
• Influence and partner with senior stakeholders: Build standing relationships with VPs, Directors, and senior engineering leaders. Drive alignment on risks and on practical, scalable solutions, including where stakeholders push back.
• Drive meaningful outcomes: Ensure audit findings lead to real improvements, not just reports. Hold a high bar for closure and validate that risks have been mitigated.
• Raise the bar for the team: Contribute to audit methodology, team operating mechanisms, and the development of audit standards across DMAAC and broader Internal Audit.


About the team
Our teams leads Internal Audit for the new and fast growing businesses of Amazon - Devices, Advertising, Media & Entertainment, AGI/Annapurna and all the Corporate Functions. We audit across a wide gamut of business risks spanning Financial, Regulatory, Reputational, Operational & Technical Efficiency.

Basic Qualifications

- Knowledge of Microsoft Office products and applications (esp. MS Excel, Word) at an advanced level
- Bachelor's degree in Computer Science, Computer Engineering, Economics, Engineering, Information Management, Information Systems, or other related discipline
- 8+ years of experience in roles involving technology and commercial/financial acumen, finance/tech business partnering, IT audit, risk management, information security, business or tech consulting or related fields.

Preferred Qualifications

- 10+ years of experience in IT audit, risk management, information security, technology consulting, or related fields.
- Master's degree across Engineering and Financial/Economics disciplines
- Familiarity with modern technology environments (Cloud, distributed systems, data platforms) and Experience with  AI/ML systems, including generative AI tools and platforms.
- Experience using data and analytics to drive business decisions and business outcomes
- Experience in consulting, Big 4, or large technology companies.
- Relevant certifications (e.g., CISA, CIA, CPA, CISSP), Understanding of control frameworks (e.g., COSO, COBIT, ISO, NIST), with a pragmatic approach to applying them.

Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.

The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits.