At American Express, our culture is built on a 175-year history of innovation, shared values and Leadership Behaviors, and an unwavering commitment to back our customers, communities, and colleagues. As part of Team Amex, youll experience this powerful backing with comprehensive support for your holistic well-being and many opportunities to learn new skills, develop as a leader, and grow your career.
Here, your voice and ideas matter, your work makes an impact, and together, you will help us define the future of American Express.
How will you make an impact in this role?
The Analyst, ICS Control Management Risk ID, Assessment, Testing & Reporting will :
- Assist in additional identification of specific risks & control gaps/deficiencies throughout business processes and systems (along with business process owners)
- Support facilitation to BUs in their risk assessments performance (e.g., Process Self Risk Assessments (PRSAs)) in addition to further assessments and testing / QA programs to ensure regulatory and internal standards are met (e.g., periodic PRSA reviews and update assessment criteria to align with regulatory updates)
- Support control testing & monitoring (supplemental to BU process owners testing) and compile key operational risk trends, activities, and events
- Proactively help identify certain areas of high-risk for intervention (e.g., automated alerts generated for high-risk areas signal need for intervention and focus), including conducting independent quality assurance and vertical process testing
- Support thematic risk reporting (levels, trends, causes)
- Categorize controls and map against risks and processes (e.g., cross-BU process-control mapping)
- Support risk management practices within the business
- Support uplift of controls in line with new internal controls policy including the ICS central control inventory
- Work with Risk SMEs in documenting shared key controls that support ICS control inventory
- Support sharing insights, better practices, themes, etc. across the enterprise
Minimum Qualifications
- 1-2 Years experience in operational risk management (e.g., within Risk and/or Internal Audit function) Understanding of critical operational risk management lifecycle activities
- Project management, communication, and interpersonal skills
- Experience in process governance, with an understanding of processes that align with policies, regulatory frameworks, and/or operational standards
- Analytical and problem-solving skills, with an ability to analyze data, identify trends, and evaluate risk scenarios effectively
Preferred Qualifications
- Bachelor s degree in finance, Business, Risk Mgmt., or related field; advanced degrees (e.g., MBA, MSc) or certifications are advantageous
- Experience in at least one of the following:
- Supporting identification of operational risks throughout business processes and systems
- Facilitating risk assessment performance in addition to further assessments and testing programs to ensure regulatory and internal standards are met
- Supporting independent control monitoring, including identification of control improvements
- Supporting the identification of areas of risk for intervention, including conducting independent quality assurance and process testing
- Compiling thematic risk reporting to provide actionable insights on risk levels, emerging trends and root causes
ORMCM