Senior Manager, IT Audit - Data Governance

American Express•New York, NY

About The Position

The Senior Manager, IT Audit supports the Internal Audit Group’s assurance coverage for Data Management. The role leads audit engagements, including planning and execution, evaluating control design and effectiveness, and delivering actionable insights to strengthen data governance, data quality, data architecture, metadata management, data lifecycle management, data risk management, reporting, regulatory compliance, and the use of critical business data across complex technology and business environments. The role also serves as a people leader, mentoring and developing colleagues and direct reports, and contributes to business monitoring and regulatory examination activities.

Requirements

At least 6 years of audit experience.
Prior experience working at a Big Four firm or a G-SIB.
Understanding of data management frameworks and principles, including data governance, data lineage, metadata management, master and reference data, data lifecycle management, end-user-developed applications, and data risk management.
Understanding of data risks and associated controls across data quality, governance and stewardship, fit-for-purpose data, data sharing, data architecture and movement, data retention and deletion, regulatory reporting, and the use of critical business data in complex technology and business environments.
Strong written and verbal communication skills, including the ability to deliver quality work and actionable, value-added feedback to management on issues, opportunities, and deficiency solutions.
Ability to lead a team in a fast-paced environment, drive business results, apply project management skills, think creatively, and manage competing priorities.
Critical-thinking skills to break down complex problems and use data analysis, process knowledge, risk and control knowledge, and experience to reach risk-based conclusions and decisions.
Ability to apply control theory and professional auditing practices throughout the audit lifecycle.
Understanding of regulations, regulatory risks, accounting, and financial-industry best practices relevant to the business, including emerging technology and data considerations, and ability to incorporate them into audit approaches.
Eligibility to work in the United States; American Express will not pursue visa sponsorship for these positions.

Nice To Haves

Professional certification such as CISA, CPA, CIA, CISM, CISSP, or another technology-focused certification.
Experience in Internal Audit, Data Management, Data Governance, Data Risk Management, Technology Risk, Information Management, Enterprise Data Management, or a related control function in financial services.
Knowledge of data-related regulatory requirements and industry standards or guidance, with the ability to assess data governance and risk management practices and associated controls.
Experience or understanding of data quality management, risk data aggregation and reporting, data sharing, and data lifecycle management.
Experience assessing governance processes, management reporting, issue identification and remediation, and technology platforms and tools supporting enterprise data management and data risk programs.
Experience with data-related key risk indicators, key performance indicators, information systems or technology, and scorecards or dashboards.
Ability to assess data management practices, identify control gaps and emerging data risks, and evaluate alignment with enterprise policies, standards, and regulatory expectations.

Responsibilities

Act as an Auditor in Charge on complex audits and/or lead multiple simultaneous low-risk audits, managing engagements end-to-end, planning projects, defining objectives and scope, coordinating with control groups and external auditors, and conducting L1 reviews.
Analyze audit results and documentation to evaluate effectiveness and efficiency and synthesize audit findings.
Lead audit client meetings and walkthroughs.
Develop test steps, audit findings, and audit reports in accordance with Internal Audit Group policies and procedures.
Guide teams in validating and executing corrective actions and Management Action Plans that are impactful, sustainable, and improve the business unit’s control environment.
Support business monitoring activities with audit leadership, track key metrics to identify control issues and trends, and analyze the impact of industry trends, external news, and regulatory changes on the business.
Delegate tasks; guide Senior and Staff colleagues in assessing risks, evaluating control design, and executing audit tests; and review and provide feedback on work papers.
Serve as a People Leader, providing mentorship, coaching, and career development support for direct reports.
Coach, teach, mentor, and develop less experienced colleagues and co-sourced resources in geographically diverse locations on their roles, the audit and analytic lifecycle, audit methodology, and best practices.
Conduct post-audit feedback discussions with team members, providing actionable feedback, supporting development, and recognizing accomplishments.
Guide the team to communicate task status, roadblocks, and challenges proactively and routinely, and suggest potential solutions.
Begin developing subject matter expertise in a specific line of business.
Serve as the first level of escalation and navigate problems and difficult conversations effectively.
Attend report and issue conversations with management and work with the Director or Team Leader to communicate and act on next steps.
Report on assigned tasks in client reporting meetings and assist with preparing materials for regulatory exams.
Follow up with management to ensure Management Action Plans are closed effectively and on time.