Mgr-Program Mgmt

American Express•New York, NY

16h•$103,750 - $174,750

About The Position

The Manager, Regulatory Engagement and Governance is responsible for managing regulatory examinations, assessments, inquiries, and related oversight activities impacting Digital Workplace Technology. This role serves as the central coordination point between Digital Workplace Technology, Risk and Compliance, internal subject matter experts, and enterprise regulatory engagement teams. The Manager ensures regulatory requests are understood, appropriately assigned, supported by complete and accurate evidence, and delivered within required timelines. The role also provides proactive regulatory readiness by identifying recurring themes, strengthening documentation and controls, and helping leadership understand emerging areas of regulatory exposure.

Requirements

Bachelor’s degree in Business, Risk Management, Technology, Finance, or a related field, or equivalent professional experience.
Experience in regulatory engagement, technology risk, operational risk, compliance, audit, control management, or governance within a regulated organization.
Strong understanding of risk and control concepts and the ability to evaluate whether documentation and evidence adequately demonstrate control execution.
Experience coordinating complex initiatives involving multiple senior stakeholders and competing deadlines.
Strong written and verbal communication skills, including experience preparing executive level materials.
Ability to analyze complex regulatory requests and translate them into clear deliverables and accountable actions.
Strong judgment with the ability to identify when an issue requires escalation.
Excellent organizational, documentation, and program management capabilities.

Nice To Haves

Experience supporting regulatory examinations within a large financial institution or other highly regulated organization.
Knowledge of technology risk management, cybersecurity, resilience, identity and access management, data governance, third party risk, or workplace technology.
Experience working with risk and control self assessments, internal controls, regulatory remediation, audit findings, and issue management.
Experience interacting with senior executives, enterprise risk functions, internal audit, legal teams, and regulatory engagement organizations.

Responsibilities

Manage regulatory engagements from initial notification through closure, including examinations, assessments, information requests, and follow-up activities.
Review regulatory requests to understand scope, intent, applicable technology processes, and potential areas of risk.
Develop and maintain engagement plans, timelines, request trackers, ownership, dependencies, and escalation paths.
Coordinate responses across Digital Workplace Technology teams and enterprise partners.
Serve as the primary Digital Workplace Technology point of contact for regulatory engagement activities.
Coordinate the collection, review, and submission of documentation and evidence supporting regulatory requests.
Assess evidence for completeness, accuracy, consistency, and alignment with the regulatory request before submission.
Challenge unclear, incomplete, or unsupported responses and work with subject matter experts to strengthen the response.
Maintain traceability between regulatory requests, responses, supporting evidence, controls, policies, procedures, and accountable owners.
Ensure regulatory submissions meet established quality and governance standards.
Prepare leaders and subject matter experts for regulatory meetings, interviews, walkthroughs, and examinations.
Develop executive briefing materials summarizing engagement scope, areas of focus, key risks, open requests, emerging concerns, and required decisions.
Conduct readiness reviews before regulatory discussions to ensure responses and supporting documentation are consistent.
Identify areas where the organization may have documentation, control, process, or evidence gaps before they become regulatory concerns.
Identify potential regulatory risks, control weaknesses, or recurring themes identified during engagements.
Partner with Risk and Compliance, Control Management, Legal, and technology teams to determine appropriate remediation.
Track regulatory commitments, findings, observations, and remediation activities through closure.
Escalate emerging risks, missed commitments, evidence concerns, or significant regulatory matters to leadership.
Ensure completed remediation is supported by sufficient evidence and sustainable control practices.
Maintain a centralized view of regulatory engagements affecting Digital Workplace Technology.
Provide regular reporting on engagement status, outstanding requests, risks, findings, commitments, and upcoming regulatory activity.
Analyze regulatory engagement trends to identify recurring areas of concern and opportunities to strengthen the control environment.
Maintain engagement records and supporting documentation in accordance with enterprise recordkeeping requirements.
Support improvements to regulatory engagement processes, procedures, templates, and governance standards.
Partner with technology leaders, engineers, product teams, Risk and Compliance, Internal Audit, Legal, Privacy, Information Security, Operational Risk, and other oversight functions.
Translate regulatory requirements and requests into clear actions for technology teams.
Facilitate discussions across multiple organizations when regulatory requests involve interconnected processes or controls.
Build strong working relationships with enterprise regulatory engagement teams and other second and third line partners.