Senior Associate - Technology Risk & Control

American Express•York, NY

3d•$89,250 - $150,250•Hybrid

About The Position

The Technology organization partners with the American Express business to enable, support, and drive the company’s growth plans and strategic priorities by supporting the delivery and operations of technology capabilities, platforms, and services globally. Specifically, the team delivers global capabilities and services in support of American Express customers and colleagues, and it is responsible for the company’s technology infrastructure, providing 24x7 support to ensure an uninterrupted, high-quality experience for external and internal customers. It also governs technology risk and information security across the American Express enterprise. The objective of the ETS Control Management Risk ID & Assessment team is to identify risks throughout business processes, systems, and platforms, develop and recommend risk mitigation strategies to address these risks, and proactively flag high risk themes for intervention and control enhancement. ETS Control Management is looking for a Senior Associate of Technology Risk & Control focused on ensuring control management is embedded in the day-to-day operations of our organization. It will involve extensive collaboration with multiple partners across the ETS business unit / functional areas.

Requirements

2+ Years experience in operational risk management (e.g., within Risk and/or Internal Audit function)
Understanding of critical operational risk management lifecycle activities, project management, communication, and interpersonal skills
Experience in process governance, with an understanding of processes that align with policies, regulatory frameworks, and/or operational standards
Sound analytical and problem-solving skills, with an ability to analyze data, identify trends, and evaluate risk scenarios effectively

Nice To Haves

Bachelor’s degree in business, Risk Mgmt., or related field; advanced degrees (e.g., MBA, MSc) or certifications are advantageous
Experience and familiarity with ACE Studio and/or Visio
Previous Technology/Cyber Risk Experience
Experience in at least one of the following: Supporting identification of operational risks throughout business processes and systems Facilitating risk assessment performance in addition to further assessments and testing programs to ensure regulatory and internal standards are met Supporting independent control monitoring, including identification of control improvements Supporting the identification of areas of risk for intervention, including conducting independent quality assurance and process testing Compiling thematic risk reporting to provide actionable insights on risk levels, emerging trends and root causes

Responsibilities

Facilitate Business Units in their risk assessments performance (e.g., Risk and Control Self-Assessment (RCSAs)) in addition to further assessments and testing / QA programs to ensure regulatory and internal standards are met (e.g., periodic RCSA reviews and update assessment criteria to align with regulatory updates)
Proactively helps identify areas of high-risk for intervention (e.g., automated alerts generated for high-risk areas signal need for intervention and focus), including conducting independent quality assurance and vertical process testing
Support control monitoring (supplemental to BU process owners testing) and compile key operational risk trends, activities, and events
Assist in additional identification of risks throughout business processes and systems (along with business process owners); design adequate controls and test plans to properly mitigate identified risks
Categorize controls and maps against risks and processes (e.g., cross-BU process-control mapping)
Support sharing insights, better practices, themes, etc. across the enterprise

Benefits

Competitive base salaries
Bonus incentives
6% Company Match on retirement savings plan
Free financial coaching and financial well-being support
Comprehensive medical, dental, vision, life insurance, and disability benefits
Flexible working model with hybrid, onsite or virtual arrangements depending on role and business need
20+ weeks paid parental leave for all parents, regardless of gender, offered for pregnancy, adoption or surrogacy
Free access to global on-site wellness centers staffed with nurses and doctors (depending on location)
Free and confidential counseling support through our Healthy Minds program
Career development and training opportunities