Manager - Audit, Data Science and Model Risk

American Express•New York, NY

About The Position

This role supports the Internal Audit Group's assurance strategy and coverage for AI/Gen AI. The Manager will help drive audit engagements end-to-end. Supporting planning and execution, evaluating the design and effectiveness of controls, and delivering actionable insights that strengthen AI governance, AI lifecycle management, and AI risk assessment practices across the enterprise. Our Data Science and Model Risk/AI team plays a critical role in supporting Internal Audit by providing specialized assurance over models and AI/Gen AI solutions used across the enterprise. We deliver independent, risk-based evaluations that help auditors gain a clearer understanding of how models and AI are developed, governed, validated, and deployed within the business. By combining quantitative expertise with business and regulatory knowledge, the team helps uncover model risks, assess governance practices, and highlight opportunities to strengthen controls — ultimately enhancing the depth, rigor, and quality of Internal Audit's coverage over AI and model risk.

Requirements

Bachelor's in Computer Science/ Financial Engineering/Statistics or another related field
5+ years of relevant work experience in the financial industry, preferably in Banking Industry
Demonstrate strong written and verbal communication skills to deliver deliverables with quality, and actionable value-add feedback to management on issues, opportunity areas, and deficiency solutions
Effectively leads a team in a fast-paced environment to drive business results, utilizing related project management skills, employing creative thinking, and the ability to work on competing priorities
Experience in developing/validating/auditing of AI/ML Models
Experience with regulatory interaction
Understanding of local and globally significant regulatory requirements pertaining to AI/Gen AI
Apply critical thinking to break-down complex problems into components, and solve using data analysis, process, risk control knowledge, and experience to drive risk-based conclusions and decisions
Applies control theory and professional auditing practices throughout the audit lifecycle
Employment eligibility to work with American Express in the U.S. is required as the company will not pursue visa sponsorship for these positions.

Responsibilities

Support the Gen AI audit coverage strategy, including risk assessments and recommendations to strengthen risk mitigation.
Manage and execute Gen AI audits, evaluating governance, risk management, and control processes across the AI lifecycle.
Share practical guidance for assessing Gen AI risks across audit portfolios.
Engage stakeholders to help ensure Gen AI risks are appropriately identified and documented.
Assess Gen AI risks, including bias, ethics, compliance, privacy, data governance, reputational, and strategic considerations.
Stay current on Gen AI technologies, ethical considerations, and regulatory requirements to inform audit coverage.
Partner with technology, risk, privacy, legal, and other stakeholders to support Gen AI audit planning and execution.
Assess the control effectiveness and deliver high-quality audit findings
Demonstrate strong judgement and sound decision making
Effectively coach, teach, mentor, and develop less experienced colleagues and co-sourced resources in geographically diverse locations across all aspects of their role, the audit and analytic lifecycle, audit methodology and best practices
Conduct post-audit feedback discussions with audit team members to provide actionable feedback, support development, and recognize accomplishments
Guide team to proactively and routinely communicate task status, roadblocks, challenges, suggesting potential solutions to the team
Lead audit client meetings and walkthroughs
Develop test steps, audit findings, and the audit report in accordance with IAG policies and procedures
Guide team on how to validate and execute corrective actions / Management Action Plans (MAPs) are impactful, sustainable, and improve the control environment of the business unit