Analyst – International Independent Compliance Testing (ICT) H/F

The Global Risk & Compliance (GRC) organization serves as American Express’ independent risk management function. GRC maintains the enterprise risk framework, provides oversight and challenge, and monitors key risks. By embedding risk discipline into strategy and operations, GRC enables responsible growth, innovation, and long-term value creation while protecting customers and shareholders.

We are seeking a detail-oriented and proactive professional to join our Compliance team as an Analyst in International Independent Compliance Testing (ICT). The successful candidate will support the delivery of high-quality independent assurance over regulatory compliance by executing testing activities, analysing evidence, and documenting clear conclusions. This role requires strong analytical skills, attention to detail, and the ability to work effectively with colleagues across a complex, global regulatory environment.

Testing Execution

• Execute assigned testing activities in accordance with ICT methodology, internal standards, and agreed review plans.

• Support the end-to-end testing lifecycle, including planning, walkthroughs, fieldwork, evidence review, workpaper preparation, and reporting.

• Analyse policies, procedures, data, processes, and controls to assess compliance with applicable regulatory requirements and internal standards.

• Maintain accurate complete, and well-supported testing documentation and workpapers.

• Manage assigned tasks across multiple reviews or workstreams, meeting agreed quality and delivery timelines.

Risk identification, Assessment & Reporting

• Apply established testing procedures to assess compliance risks and control effectiveness objectively.

• Identify potential gaps, control weaknesses, or exceptions and escalate them tot he review lead in a timely manner.

• Form evidence-based conclusions and document testing results clearly and accurately.

• Support preparation of concise review reports, issues/findings, and materials for relevant stakeholders and governance forums.

Stakeholder Engagement

• Develop an understanding of the business model, products, services, and relevant regulatory obligations.

• Work with Legal Entity Compliance Officers, business teams, and other risk functions to obtain information and supporting evidence.

• Participate in stakeholder meetings and contribute to discussions on review scope, testing progress, and results.

• Build effective working relationships with colleagues across jurisdictions, business units, and functions.

• Communicate testing queries, results, and concerns clearly and professionally.

Team Contribution & Development

• Work collaboratively with review leads and other testing colleagues to support consistent, high-quality delivery.

• Actively seek feedback and build technical knowledge of compliance testing, control evaluation, and relevant regulatory requirements.

• Share knowledge and contribute to an inclusive, collaborative, and continuous-learning culture.

Framework & Regulatory Alignment

• Apply the global ICT framework, standards, procedures, and templates consistently.

• Support improvements to testing tools, templates, processes, and reporting based on review experience and lessons learned.

• Maintain awareness of regulatory developments relevant to assigned reviews and discuss potential implications with the review lead.

• Support alignment with evolving internal standards, industry practices, and regulatory expectations.

• Relevant professional certification, or progress toward certification, preferably in privacy and/or consumer protection (e.g., CIPP/ ICA, CIA or equivalent), preferred.

• Relevant experience, typically up to 3 years, in regulatory compliance, internal or external audit, risk management, assurance, or financial services.

• Foundational understanding of compliance testing, control evaluation, or risk management concepts.

• Ability to review information, identify potential risks or exceptions, and form evidence-based conclusions.

• Strong analytical, problem-solving, and attention-to-detail skills.

• Effective written and verbal communication skills, including the ability to document work clearly and accurately.

• Ability to manage competing priorities, work collaboratively, and meet agreed deadlines in a matrixed, globally distributed organisation.

• Proficiency in English and Microsoft Office applications, including Excel, Word, and PowerPoint.

Non-considerations for sponsorship:

Employment eligibility to work with American Express in France is required as the company will not pursue visa sponsorship for these positions.