Senior Manager - Technology Risk & Control
ETS Control Management is responsible for identifying, assessing, mitigating, monitoring & reporting risk across business and technology processes as part of the first line of defense. The team ensures adherence to regulatory standards, American Express policies, and strengthens business resilience through robust control management practices.
This Manager role focuses on embedding strong Control Testing & Operational Risk within BU processes for Enterprise Digital. Beyond executing core control management activities, the role is expected to use risk insights to influence business and technology decisions, strengthen control effectiveness, improve resilience, and enable the safe delivery of digital capabilities.
The successful candidate will combine strong execution across control management disciplines with the ability to drive continuous improvement through data, automation, and AI-enabled solutions. They will partner closely with business, product, technology, and control stakeholders to translate risk information into actionable business outcomes and support Enterprise Digital's transformation agenda.
Enterprise Digital creates unified digital experiences for prospects and members across the entire customer lifecycle, powered by data and supports AXP growth by designing best-in-class digital & data capabilities and platforms.
Key Responsibilities
- Perform independent control testing (test of design and effectiveness) using a risk-based approach across control tiers -across across issue management lifecycle, RCSA Accelerated & Standard testing, PRSA testing , regulatory and Internal standards
- Develop and execute control monitoring (supplemental to BU testing) though Key Control Indicators and Key Risk Indicators.
- Use risk monitoring, control testing outcomes, incidents, customer impacts, and operational trends to generate actionable insights that influence business decisions, strengthen resilience, and improve customer outcomes.
- Support risk identification and assessment activities across business and technology processes, including RCSA execution
- Translate risk assessments, control testing results, and monitoring insights into recommendations that influence business and technology decisions, improve control design, prioritize remediation, and enable faster, safer delivery.
- Lead or contribute to transformation initiatives that simplify processes, enhance governance frameworks, improve monitoring capabilities, and strengthen the overall Control Management operating model.
- Drive continuous improvement of Control Management capabilities through automation, data analytics, dashboards, and AI/GenAI-enabled solutions to improve control effectiveness, monitoring, reporting, and operational efficiency
- Develop and communicate meaningful risk insights and business-focused reporting for senior leadership and governance
Required Qualifications
- 10 plus years of experience in Control Testing or operational risk, Technology risk, IT/IS risk, within financial services or regulated environments
Demonstrated ability to connect risk management activities to measurable business outcomes, including reducing operational risk, improving resilience, accelerating delivery, strengthening governance, or improving customer outcomes.
Proven experience influencing business and technology stakeholders through risk insights, control recommendations, or governance decisions.
Experience leading or contributing to transformation initiatives that improve operating models, simplify control environments, enhance monitoring capabilities, or strengthen governance frameworks.
- Strong analytical and problem-solving skills with the ability to leverage data, dashboards, and emerging technologies to identify trends, generate actionable risk insights, and support strategic business decision-making.
- Experience working with GRC tools (e.g., Archer, ServiceNow, OpenPages, MetricStream). Strong MS Office skills (Excel, Power Point, Word)
- Experience using automation, analytics, dashboards, or AI/GenAI solutions to improve efficiency, control effectiveness, monitoring, reporting, or operational risk management.
Preferred Qualifications
- Bachelor’s degree in engineering, or related field; advanced degrees (e.g., MBA, MSc) or certifications are advantageous
- Relevant certifications: CISA, CISM, CRISC, CISSP, or similar
- Experience working in Agile / product / platform-based environments