Analyst-Control Management

Enterprise Shared Services (ESS) comprises key functions that are core to the company’s operations, including Global Real Estate & Workplace Experience, Global Supply Management, Business Resilience, Corporate Functions Governance & Control, Aviation, Internal Fraud Center of Excellence and Global Security. ESS helps keep American Express growing and puts our colleagues at the center of everything they do by delivering best-in-class services that power safe, resilient, and efficient operations around the world.

The Corporate Functions Governance & Control team within ESS serves as the business unit Governance & Control Management function for several corporate groups including ESS; Corporate Affairs & Communications (CA&C); Colleague Experience Group (CEG); General Counsel’s Organization (GCO); Enterprise Strategy (ES); and American Express National Bank Headquarters (AENB HQ).

The objective of the Corporate Functions Governance & Control Governance team is to enable risk governance and control management for Corporate Functions, through a structure that governs, identifies, assesses, manages and reports on enterprise, operational and compliance risks.

The Corporate Functions Governance & Control team is looking for is looking for a Testing Analyst. This role will involve extensive collaboration with multiple partners across numerous business units, functional areas, and geographies.

The Analyst, Corporate Functions Testing will:

• Conduct Risk and Control Self Risk Assessment (RCSA) for Corporate Functions business units
• Execute control testing and quality assurance activities to assess control design and operating effectiveness
• Develop, document, and maintain control testing scripts, methodologies, procedures, and evidence in accordance with internal standards and regulatory expectations
• Identify control gaps, deficiencies, and areas of heightened risk exposure, and support development of remediation activities
• Document testing results, observations, and thematic findings, and track deliverables through completion
• Facilitate business unit risk assessment and testing activities to ensure compliance with regulatory and internal standards
• Document and project manage deliverables to completion
• Categorize controls and map to risks (e.g., cross-BU process-control mapping)
• Proactively help identify certain areas of high-risk for intervention
• Support thematic risk reporting (levels, trends, causes)
• Collaborate with stakeholders to support control improvements

• Facilitate business unit risk assessment and testing activities to ensure compliance with regulatory and internal standards

• Compile thematic risk reporting (levels, trends, causes) to provide actionable insights to BU on current risk levels, emerging trends and root causes
• Support sharing insights, better practices, themes, etc. across the enterprise

• 2+ years of experience in operational risk management, controls testing, quality assurance, compliance testing, and/or internal audit
• Understanding of operational risk management lifecycle activities, including risk identification, control design, testing, issue management, and remediation
• Experience executing control testing, documenting test results, reviewing evidence, and assessing control effectiveness
• Strong analytical and problem-solving skills, including the ability to analyze data, identify trends, evaluate risk scenarios, and escalate potential issues appropriately
• Strong project management, communication, and interpersonal skills with ability to manage multiple deliverables simultaneously
• Experience in process governance and working with processes aligned to policies, regulatory frameworks, and operational standards
• Strong attention to detail and ability to operate effectively in fast-paced environments with evolving priorities

Preferred Qualifications:

• Bachelor's Degree in Finance, Business, Risk Mgmt., or related field; advanced degrees (e.g., MBA, MSc) or certifications are advantageous
• Exposure to data analytics, automation, or AI/GenAI use cases in risk/control environments
• Experience in at least one of the following:

• Supporting identification of risks throughout business processes and systems

• Facilitating risk assessment performance in addition to further assessments and testing programs to ensure regulatory and internal standards are met

• Supporting independent control monitoring, including identification of control improvements

• Supporting the identification of areas of risk for intervention, including conducting independent quality assurance and process testing