Manager of Third-Party Resilience

American Express•New York, NY

About The Position

Third Party Resilience focuses on helping American Express anticipate, prepare for, and respond to disruptions that could affect services performed by external vendors, suppliers, and service providers. This includes disruptions such as cyberattacks, natural disasters, technology failures, or other events that may impact operational continuity, security, compliance, and contractual delivery. The Third-Party Resilience program is part of the Operational Resilience and Business Continuity Management team within Enterprise Shared Services. The team partners across the company to implement and oversee resilience, continuity, and response capabilities related to services performed by third parties, including planning and preparedness for potential service disruptions and crisis events. As a Manager of Third-Party Resilience, you will help identify and manage resiliency risk across third-party vendors so critical services can continue to operate through disruption. You will work closely with third-party risk partners, business stakeholders, relationship managers, and resilience colleagues to strengthen the program and drive practical risk outcomes.

Requirements

3+ years’ experience in Third Party Resilience Risk Management and/or Business Continuity.
Strong understanding of American Express products, services, and organizational structure.
Strong problem-solving skills; ability to see the big picture with attention given to critical details.
Demonstrated ability to successfully manage multiple priorities under pressure.
Bachelor’s degree required
Employment eligibility to work with American Express in the United States is required as the company will not pursue visa sponsorship for these positions.

Nice To Haves

Familiarity with Third Party Lifecycle Management program is preferred.
MBA or advanced degree preferred.
Demonstrate thought leadership and ability to work independently and creatively to solve problems.
Excellent relationship and collaboration skills with ability to interact and influence stakeholders in a matrixed organization.
Strong written and verbal communication skills with ability to translate resilience concepts and key risks for colleagues, business partners, and senior leaders.
Dynamic, self-motivated colleague with proven track record on driving process improvements.
Self-starter who can work independently, think creatively, and drive workstreams to completion.
Ability to communicate key risks to colleagues, business partners, and senior leaders.

Responsibilities

Strengthen third-party resilience risk management
Serve as a subject matter expert for the Resilience pillar within Third Party Risk Management.
Enhance and implement resilience risk assessment activities for third-party engagements.
Collaborate with cross-functional partners across the organization to identify and manage third-party resilience risks and strengthen continuity of critical services.
Support program execution, quality, and reporting
Support quality assurance over resilience assessments and due diligence artifacts.
Manage sole provider third-party risk by identifying relevant engagements, defining resilience risk management strategies, and establishing reporting.
Define and implement resiliency risk management strategies for third parties supporting Critical Business Functions.
Drive preparedness, oversight, and continuous improvement
Partner with stakeholders to design and conduct joint business continuity exercises with third parties to test preparedness and response effectiveness to business disruptions.
Support regulatory and internal audits and reviews related to the resilience pillar of Third Party Risk Management.
Contribute to benchmarking the Third Party Resilience program against peer companies to inform continuous improvement.