ERP Controls and Security Manager, Accounting Transformation Group

Amazon is seeking an experienced ERP Controls and Security Manager to lead the design and implementation of controls, security, and access-governance capabilities as part of a large-scale transformation of Amazon’s Finance ERP platform. This role sits at the intersection of Accounting, Internal Controls, Security, Finance, and technology, with responsibility for translating controllership, audit, regulatory, and information-security requirements into scalable ERP controls and security capabilities. The scope includes role-based access, segregation of duties, privileged access, automated application controls, access certification, security monitoring, and governance, risk, and compliance solutions. The successful candidate will partner with Accounting, Internal Controls, Internal Audit, Information Security, Product, Solution Architecture, Engineering, SAP, and implementation partners to define requirements, evaluate design alternatives, and ensure controls and security are embedded throughout design, build, testing, deployment, and ongoing operations. This role requires an individual who can move between detailed control requirements and broader ERP architecture decisions. You will need to understand how accounting processes, organizational structures, job responsibilities, system integrations, regulatory requirements, and security standards translate into a controlled, auditable, and maintainable ERP environment. Key job responsibilities • Define role-based access and authorization requirements that support business responsibilities while maintaining appropriate segregation of duties. • Establish capabilities for user provisioning, access approvals, privileged access, emergency access, periodic certification, and access removal. • Partner with Accounting and Internal Controls teams to identify and design automated and configurable application controls across financial processes. • Define segregation-of-duties rules, evaluate conflicts, establish mitigation controls, and support remediation of access and control risks. • Partner with Information Security, Solution Architecture, Engineering, ERP product, and implementation partners throughout design, configuration, integration, testing, deployment, and stabilization. • Ensure ERP designs meet applicable IT general control, SOX, audit, data-protection, security, and regulatory requirements. • Lead controls and security testing, including design validation, role testing, access testing, control-effectiveness testing, defect resolution, and audit-evidence readiness. • Establish monitoring and reporting for access risks, control exceptions, security events, remediation status, and control effectiveness. A day in the life You will work across Accounting, Controls, Security, and technology teams to embed controls and security into Amazon’s Finance ERP platform. A typical day may include evaluating an access-role design, resolving a segregation-of-duties conflict, reviewing an automated control, or assessing testing results. You will partner with Internal Controls, Information Security, Architecture, Engineering, SAP, and implementation teams to manage risks and design decisions. You will also review control and access metrics and communicate issues, trade-offs, and recommendations to senior leaders.

The Accounting Transformation Group drives initiatives that modernize accounting processes, strengthen controllership, and enable scalable growth across Amazon. The team operates at the intersection of Accounting, Finance, Product, Solution Architecture, process design, and technology to build scalable financial capabilities and support Amazon's evolving business needs.