Governance and Risk Manager (2LOD) , Digital Service Act (DSA), RISC International

Amazon is hiring a Governance and Risk Manager (2LOD) , Digital Service Act (DSA), RISC International in Milan, United States. It pays €41k a year and Level rates it ; you can apply on Amazon.

Level's read on this job

Works on AI ●●●○ is how Level rates this role: the daily work is on AI products, without building the model.
Tools and skills the posting cites include AI Compliance Tools, risk management and regulatory compliance.
Level classifies it as a senior role.
Level lists 21,000+ other open roles at Amazon.

AI in this role

Governance and risk manager leading compliance frameworks and leveraging AI solutions to build risk registers for regulatory requirements.

ai-compliance-tools

risk-managementregulatory-compliancedigital-services-actdata-analysis

We are looking for a Governance and Risk Manager to support our second line of defense (2LOD) efforts. In this role, you will work closely with our DSA Compliance team and 60+ partner teams on the management of the EU Digital Services Act (DSA), and build the roll-out of a Risk Register and Second Line of Defense for all product compliance, safety and EPR regulations worldwide. This is an exciting opportunity to build a program that will help protect customers, support sellers compliance, and protect brand holders' rights.

You will support the development and implementation of 2LOD risk identification, assessment and mitigation frameworks, policies, and procedures to ensure independent oversight of Amazon's compliance with product compliance, safety and EPR regulations and requirements. You will assist in the identification, assessment, and monitoring of key operational risk indicators, areas of improvements, and recommend appropriate action. As an AI-native, you will spearhead new tech and AI solutions to build the 2LOD Risk Register in a streamlined and efficient way. You will partner with numerous Amazon teams within Worldwide RISC, as well as Legal, Public Policy, Product Quality, Brand Registry, Books, Advertising, and several other business, product, and tech teams.

You should have demonstrated experience supporting large-scale programs across a matrixed organization. You must have strong written and verbal communication skills, with the ability to use data analysis to solve complex problems. You should be very confident in using AI to solve business problems, ideally within a compliance or risk management background.

The applicable collective agreement for this role is CBA for employees of Telecommunication Sector. The position is classified at level 7 or above, depending on the candidate’s skills, competences and experience.

Key job responsibilities
Regulatory Compliance:
- Support the development and implementation of 2LOD risk identification, assessment and management frameworks, policies, and procedures to ensure adherence to the DSA, product compliance, product safety and EPR regulations across EU and worldwide.
- Conduct gap analyses to identify areas of non-compliance and drive required changes to business practices, owning the end-to-end remediation process.
- Partner with Legal, Risk, and business stakeholders to maintain and evolve compliance policies and control frameworks, ensuring they remain fit-for-purpose as the regulatory landscape evolves.
- Support the rollout for coverage across EU and Worldwide in an AI-enabled and streamlined way.

Compliance Advisory:
- Support the delivery of accurate and timely second-line compliance advice to the business, in conjunction with stakeholders;
- Help evaluate compliance risks and analyze compliance requirements within new and existing business propositions and product launches;
- Partner with the business to implement appropriate controls and mitigation strategies.

Subject Matter Expertise:
- Serve as the go-to subject matter expert and knowledge resource for the business on key regulatory topics, building deep expertise in the applicable regulatory framework and translating complex requirements into actionable guidance.

Risk Monitoring and Reporting:
- Track and document compliance risks and issues in an AI-powered way, collaborating with internal risk management teams (Risk Management, InfoSec) to identify necessary mitigation steps.
- Develop Key Risk Indicators to report on inherent and residual risk to partner teams and leadership (including to the Board of Directors).
- Work on translation methodology and mechanism of results to other Amazon organizations' risk frameworks.

About the team
At Amazon we believe that customer trust is of paramount importance to anything we do. To raise that bar, the Trustworthy Shopping Experience team works with regulators, brands, selling partners, and customers to identify, to mitigate, and to prevent product safety risk and product compliance risk.
The Regulatory Insights, Safety and Compliance (RISC) team covers product safety, product compliance, product quality for our Retail and Seller businesses in International stores. For the EU DSA law, our Compliance Office partners with 60 teams across Selling Partner Services, Ads, and Shopping orgs to ensure Amazon’s DSA compliance.

Basic qualifications

- Bachelor's degree
- Experience in compliance, audit or risk management
- Experience building cross-functional partnerships and influencing stakeholders across the organization to act without having a direct reporting relationship
- Experience handling confidential information

Preferred qualifications

- Building with AI in an AI-first mindset
- Experience building risk assessment frameworks

Amazon is an equal opportunities employer. We believe passionately that employing a diverse workforce is central to our success. We make recruiting decisions based on your experience and skills. We value your passion to discover, invent, simplify and build. Protecting your privacy and the security of your data is a longstanding top priority for Amazon. Please consult our Privacy Notice (https://www.amazon.jobs/en/privacy_page) to know more about how we collect, use and transfer the personal data of our candidates.

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.

The minimum gross base salary for this position is listed below. The base salary listed corresponds to working on a full-time basis. For part-time hours, the salary will be pro-rated.

Amazon reserves the right to offer a higher salary and/or level, depending on the candidate's skills, competencies, and experience. Amazon's package may include a sign on payment. In addition, the candidate may be eligible to participate in a restricted stock unit scheme operated independently by Amazon.com Inc. in USA. Your recruiting team will share final salary and any restricted stock unit scheme if applicable, depending on skills and requirements.

In addition to statutory benefits, and those applicable to the relevant CBA, company supplementary benefits may apply subject to further terms.

See below the minimum gross base salary for this position:

Milan, ITA - 40,800.00 EUR Annually

How we rate this

Governance and Risk Manager (2LOD) , Digital Service Act (DSA), RISC International at Amazon rates 65 out of 100 for how much of the daily work is AI. That makes it Works on AI (AI Level 3 of 4). The level is about AI in the job, not seniority.

Classification

Works on AI. The daily work is on AI products, without building the model.

●●●● Builds AI80 to 100
●●●○ Works on AI60 to 79
●●○○ Uses AI40 to 59
●○○○ Little AI0 to 39

Levels come from how often the tools, models and workflows of the role are named in the posting itself. Read the description and count the AI tools, models and workflows it names.

Key facts

Governance and Risk Manager (2LOD) , Digital Service Act (DSA), RISC International is an open job at Amazon.
Level rates this role AI Level 3 of 4: Works on AI.
The listed salary is €41k a year.
The role is based in IT, MI, Milan.
The job was posted on August 12, 2026.
Seniority: senior.
Applications are handled by Amazon. Apply on Amazon

Prepare for this job

Built from this posting and from similar jobs on Level.

Skills and AI tools this role asks for

Risk ManagementRegulatory ComplianceDigital Services ActData AnalysisAI Compliance Tools

Questions you could be asked

Tell me about a project where risk management was part of your work. What did you do?
Tell me about a project where regulatory compliance was part of your work. What did you do?
Tell me about a project where digital services act was part of your work. What did you do?
Tell me about a project where data analysis was part of your work. What did you do?
Walk me through how you've used AI Compliance Tools in your day-to-day work.

Adapt your resume

List these exact terms on your resume: Risk Management, Regulatory Compliance, Digital Services Act, Data Analysis, and AI Compliance Tools. An applicant tracking system matches the wording, not the idea.
Attach one line of real, concrete experience to at least one of them. A tool named with nothing behind it rarely survives a human read.
Show where AI is part of your daily process, not a one-off project. This role expects it to be a running habit.

Want an expert to read your CV for this job?

Free. Send your CV and the role you want next. We reply by email within 2 to 4 business days.

Get a free CV review Get an express CV review Check your resume with the ATS resume checker

Get new AI jobs (Works on AI ●●●○ or higher) by email

One email a week with the new AI jobs (Works on AI ●●●○ or higher), each rated for how much AI is in the work. No recruiter spam, unsubscribe in one click.

Free. One email a week. Unsubscribe in one click.