Director - IT Audit

American Express•Phoenix, AZ

About The Position

American Express’s Internal Audit Group (IAG) is a worldwide function with more than 300 team members and offices in nine countries. Its mission is to protect and enhance organizational value through independent, objective, risk-based assurance and advisory services, and to influence how the company manages risk. The group includes professionals with backgrounds in internal controls, consumer compliance, technology, operational risk, financial accounting, data analytics, and banking operations. Audit teams align to key risk areas and business units, while the Professional Practices group manages audit operations, quality and standards, regulatory relations, reporting, training, professional development, and internal capabilities and technologies. The Director will join the Internal Audit Group in New York City, Phoenix, Arizona, Charlotte, North Carolina, or Sandy, Utah. The role audits technology and application controls integrated into first-line and second-line business processes as part of integrated audits with other audit disciplines. The Director leads and oversees complex audit work across portfolios and business areas, contributes to risk-based audit planning, supports regulatory activities, and develops relationships with senior business leaders. The role also serves as a people leader, developing audit staff and improving audit methods and team capabilities.

Requirements

At least 8 years of audit experience.
Prior experience working at a Big Four firm or a G-SIB.
Strong written and verbal communication skills, including the ability to provide management with high-quality, actionable, value-added feedback on potential issues and solutions.
Ability to oversee multiple audits, projects, and a portfolio; set direction; and develop team capabilities.
Ability to guide teams in applying critical thinking to evaluate risks and translate considerations into evidence and risk-based insights.
Ability to guide teams in applying control theory and professional auditing practices throughout the audit lifecycle, including the design and evaluation of control frameworks.
Ability to stay current on and share knowledge of trends, developments, regulations, technologies, and best practices in auditing, banking, and the area of specialization.
Experience with technology control testing, including automated processing, interface inputs, reports, application security, business continuity, and third parties.
Eligibility to work in the United States for American Express; the company will not pursue visa sponsorship for these positions.

Nice To Haves

Experience with data analytics tools, data visualization, key risk indicators (KRIs), key performance indicators (KPIs), information systems or technology, and scorecards or dashboards.
Interest in working with data, interpreting results, and applying analytic best practices, with experience using data analytics and data visualization tools.
Professional certification such as CISA, CPA, CIA, CISM, CISSP, or another technology-focused certification.

Responsibilities

Oversee audit professionals across simultaneous projects of varying sizes and complexity, including work across business areas, regions, and audit leaders; ensure timely, high-quality completion and conduct Level 2 reviews.
Specialize in one or more lines of business and own a portfolio with accountability and a horizontal view of portfolio risks.
Collaborate with Audit Leaders to develop the annual risk-based Audit Plan, using portfolio knowledge, banking knowledge, and industry trends to establish adequate coverage.
Support and/or lead regulatory activities and attend regulatory meetings as appropriate.
Lead delivery and execution of the annual Audit Plan for the assigned portfolio using an integrated approach that considers financial, operational, compliance, and technology risks.
Review management corrective action plans addressing business-identified issues, audit findings, and regulatory remediations.
Lead Chief Audit Executive audit report reviews and share insights and observations.
Build relationships with Senior Business Leaders across business units; identify changes in the business environment, emerging risks, and control priorities; conduct business monitoring and guide teams in adjusting audit approaches.
Provide effective challenge and subject matter and industry knowledge to support business partnerships.
Collaborate with Senior Managers and Managers on post-audit feedback discussions, providing actionable feedback, supporting development, and recognizing accomplishments.
Support Audit Leaders on special projects across business units and geographic regions, helping ensure alignment with organizational objectives and risk frameworks and assisting with regulator responses and meetings as needed.
Serve as a People Leader by mentoring, coaching, and supporting career development for direct reports.
Recruit, supervise, coach, mentor, and develop audit staff to build high-performing teams and foster continuous learning and professional growth.
Develop training plans to upskill colleagues and ensure audit teams can effectively deliver the Audit Plan.
Monitor industry trends, regulatory developments, and auditing and banking best practices, incorporating relevant insights into audit methodologies and team practices.
Own and execute multiple IT audits concurrently, and support audit teams by testing IT-specific controls and guiding them on IT processes, controls, and application implications.