Sr Assoc-Tech Risk & Control

At American Express, our culture is built on a 175-year history of innovation, shared values and Leadership Behaviors, and an unwavering commitment to back our customers, communities, and colleagues. As part of Team Amex, you'll experience this powerful backing with comprehensive support for your holistic well-being and many opportunities to learn new skills, develop as a leader, and grow your career.

Here, your voice and ideas matter, your work makes an impact, and together, you will help us define the future of American Express.

Roles and Responsibilities:

• Conducts advanced risk assessments to identify complex risks within the organization's technology environments, ensuring that all critical areas are evaluated for security weaknesses
• Monitors technology environments to detect, analyze, and respond to emerging threats in real-time, utilizing advanced threat detection tools and techniques to minimize any potential security incidents
• Ensures risk management practices align with the organization's overall risk appetite and compliance standards, maintaining a balanced approach to risk-taking
• Develops, updates, and maintains risk management documentation, ensuring that all risk management activities are standardized, documented, and consistently applied across the organization
• Prepares detailed reports and documentation to support risk management activities and compliance efforts, providing clear and accurate records of risk assessments, mitigation actions, and compliance status for internal stakeholders
• Assesses potential impact of emerging technologies and industry trends, emerging threats, and best practices in Technology Risk & Control, ensuring that the organization remains proactive and prepared to address new and evolving risks
• Conducts risk assessments to determine the residual risk within the organization's technology environments, ensuring all areas are evaluated for non-compliance
• Supports the identification and evaluation of controls and adherence to controls, providing preliminary analysis and recommendations
• Collaborates and co-creates effectively with teams in product and the business to align technology initiatives with business objectives

• Education and Knowledge :

• · Bachelor's Degree in Computer Science, Information Systems, Cybersecurity, and/or comparable experience

• · Knowledge of regulatory compliance and security standards (e.g., ISO, NIST, FFIEC Handbooks, GDPR)

• · Foundational knowledge of global technology standards and applicable regulations

• · Foundational knowledge of technology control domains such as Identity & Access Management, Security Architectures, Security Governance & Operations, IT General Controls, Security Testing, and Cloud Security

• · Skilled in enterprise risk management with an emphasis on operational risk management and technology risk

• Work Experience:

• Experience in technology risk & control and information security
• Experience in risk assessment methodologies and advanced mitigation strategies
• Experience in processing regulatory requirements and compliance standards in the technology sector
• Experience with Risk Assessment and Management tools such as RSA Archer, MetricStream, RiskWatch
• Experience with Compliance Management tools such as ServiceNow GRC, SAP GRC, LogicGate
• Experience with Data Visualization and Reporting tools such as Tableau, PowerBI

We back you with benefits that support your holistic well-being so you can be and deliver your best. This means caring for you and your loved ones' physical, financial, and mental health, as well as providing the flexibility you need to thrive personally and professionally:

• Competitive base salaries
• Bonus incentives
• Support for financial-well-being and retirement
• Comprehensive medical, dental, vision, life insurance, and disability benefits (depending on location)
• Flexible working model with hybrid, onsite or virtual arrangements depending on role and business need
• Generous paid parental leave policies (depending on your location)
• Free access to global on-site wellness centers staffed with nurses and doctors (depending on location)
• Free and confidential counseling support through our Healthy Minds program
• Career development and training opportunities

American Express is an equal opportunity employer and makes employment decisions without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran status, disability status, age, or any other status protected by law.

Offer of employment with American Express is conditioned upon the successful completion of a background verification check, subject to applicable laws and regulations.