Job
Description
Lead design, prioritization and implementation strategy for Application Controls across USCS products and processes, including our Prop Cards, Co-Brand, Lending, Banking, Dining and Digital Labs Serve as an authority within USCS on application controls that promote data integrity and reliability for business processes Collaborate with key partners to drive improvement of input, processing, output, and direct application change controls through the alignment and definition of expectations and roles and responsibilities Collaborate with other business units within American Express to bring an end-to-end view of Cardmember transactions is covered from an application controls viewpoint Conduct in-depth process design and risk analyses on business functions facilitated by applications, to identify data integrity issues and/or operational risks Liaise with BU process owners and technology application owners to craft and implement controls, and provide broader input on areas of risk Perform thematic analyses from previous application control-related issues and partner with Risk ID & Assessment teams to develop risk mitigation strategies Align with American Express policies and programs pertaining to specific risk types (e.g., AEMP70 Enterprise Data Governance Policy, TECH Standard 06.48), and support with the design or improvement of BU procedures or standards by providing topic-specific direction Advise on integration of decentralized risk types into broader Operational Risk Management (ORM) policies and programs Develop and maintain a repository of topical risk information, including emerging trends, industry standards, and regulatory updates relevant to each area of expertise Support with design and dissemination of targeted training and awareness programs to increase understanding and management of technology application controls within USCS Share topical risk knowledge to enable the BU to strengthen and embed relevant ORM considerations into processes Share insights, practices, themes, etc. across the company Minimum Qualifications 1-2 Years experience in operational risk management (e.g., within Risk and/or Internal Audit function) Understanding of critical operational risk management lifecycle activities Project management, communication, and interpersonal skills Experience in process governance, with an understanding of processes that align with policies, regulatory frameworks, and/or operational standards Analytical and problem-solving skills, with an ability to analyze data, identify trends, and evaluate risk scenarios effectively Preferred Qualifications Bachelor s degree in finance, Business, Risk Mgmt., or related field; advanced degrees (e.g., MBA, MSc) or certifications are advantageous Experience in at least one of the following: Supporting identification of operational risks throughout business processes and systems Facilitating risk assessment performance in addition to further assessments and testing programs to ensure regulatory and internal standards are met Supporting independent control monitoring, including identification of control improvements Supporting the identification of areas of risk for intervention, including conducting independent quality assurance and process testing Compiling thematic risk reporting to provide actionable insights on risk levels, emerging trends and root causes
