Manager-Ops Risk Management

American Express • Phoenix, AZ

5d

About The Position

The GRC Control Management RCSA team drives consistent and timely execution of the Risk and Control Self-Assessment (RCSA) program. It partners with business leaders to identify, assess, and monitor operational risks, evaluate control effectiveness, and promote a strong risk and control environment.

The Manager of RCSA oversees execution, quality, and governance of the RCSA program. The role partners with business, risk, compliance, and control management stakeholders to ensure risk assessments are completed consistently, key risks are appropriately identified and evaluated, and control effectiveness is challenged and documented in accordance with enterprise standards.

Requirements

• 4+ years of experience in operational risk management, such as within a Risk or Internal Audit function.
• Understanding of critical operational risk management lifecycle activities.
• Demonstrated experience leading or executing Risk and Control Self-Assessments (RCSAs), risk assessments, control evaluations, or similar governance programs.
• Strong understanding of operational risk management frameworks, control design, control effectiveness assessment, and issue management practices.
• Ability to manage multiple deliverables, stakeholders, and competing priorities within structured governance environments.
• Excellent written and verbal communication skills, including experience presenting risk-related matters to senior leadership.
• Strong analytical, problem-solving, and critical-thinking capabilities, with the ability to challenge risk assessments and identify control gaps.
• Eligibility to work in the United States with American Express; the company will not pursue visa sponsorship for these positions.

Nice To Haves

• Bachelor's degree in Finance, Business, Risk Management, or a related field; advanced degrees such as an MBA or MSc, or certifications, are advantageous.
• Experience facilitating RCSA workshops, risk identification sessions, and control assessment reviews.
• Experience interpreting and applying operational risk, compliance, or regulatory requirements within a large financial institution.
• Experience in the financial industry.
• Experience partnering with first-line business teams to drive accountability for risk ownership and control effectiveness.

Responsibilities

• Lead and coordinate end-to-end execution of the RCSA program across assigned RAUs, ensuring adherence to enterprise standards, timelines, and quality expectations.
• Facilitate risk identification and assessment discussions with business stakeholders to ensure material risks and key controls are appropriately documented.
• Challenge and review risk and control assessments for completeness, accuracy, and consistency with established methodology.
• Perform quality assurance reviews of RCSA documentation, including risk statements, control inventories, control assessments, and supporting evidence.
• Drive completion of RCSA milestones and deliverables, escalating risks, issues, and execution challenges as appropriate.
• Analyze RCSA outputs, issues, events, and control performance trends to identify emerging risks, thematic concerns, and opportunities for control enhancement.
• Partner with business, compliance, audit, and ORM stakeholders to resolve assessment gaps and ensure sustainable remediation of identified control weaknesses.
• Prepare and present RCSA status updates, key observations, and risk themes to senior management and governance forums.
• Support continuous improvement initiatives to enhance RCSA effectiveness, consistency, reporting, and stakeholder engagement.

What This Job Offers

• Job Type: Full-time
• Career Level: Manager
• Education Level: No Education Listed