Manager Control Management

Job Description

Work Location Options:
Hybrid

At American Express, our culture is built on a 175-year history of innovation, shared Leadership Behaviors, and an unwavering commitment to support our customers, communities, and colleagues. As part of Team Amex, you'll experience this powerful backing with comprehensive support for your holistic well-being and many opportunities to learn new skills, develop as a leader, and grow your career.

Here, your voice and ideas matter, your work makes an impact, and together, you will help us define the future of American Express.

ICS Governance & Control sits within International Card Services (ICS) which comprises all the issuing functions across all 28 international markets excluding the US – colleagues operate across a variety of geographies and disciplines. I.C.S issues products to our consumer and commercial customers; the organization is an integral part of the global growth strategy for American Express, offering differentiated products and services that drive significant growth and value through the delivery of innovative products tailored to our customers’ needs.

The objective of the I.C.S Control Management Risk , Assessment, Testing and Reporting team is to identify, assess, mitigate, and report on Operational Risk within BU processes for I.C.S to ensure adherence to regulatory standards, Amex policy and enhance the BU's resilience through a clear methodology of inherent and residual risk.

• Provide additional identification of risks throughout business processes and systems (along with business process owners)
• Facilitate BUs in their risk assessments performance (e.g., Risk Control Self Assessment (RCSA)) in addition to further assessments and testing/QA programs to ensure regulatory and internal standards are met (e.g., periodic RCSA reviews and update assessment criteria to align with regulatory updates)
• Conduct control monitoring (supplemental to BU process owners testing) and compile key operational risk trends, activities, and events
• Proactively help identify areas of high-risk for intervention (e.g., automated alerts generated for high-risk areas signal need for intervention and focus), including conducting independent quality assurance and vertical process testing
• Compile thematic risk reporting (levels, trends, causes) to provide actionable insights to BU on current risk levels, emerging trends and root causes
• Review categorization of controls and map against risks and processes (e.g., cross‑BU process‑control mapping)
• Advise BU with identification of risks and spotting areas where product changes or improved controls may be required within New Product Governance (NPG)
• Support risk management practices within the business
• Review risk dashboards and key risk indicators (KRIs) for ongoing monitoring
• Review risk profiles and an updated risk register(s)
• Support sharing insights, better practices, themes, etc. across the enterprise

• 3+ years experience in operational risk management (e.g., within Risk and/or Internal Audit function)
• Understanding of critical operational risk management lifecycle activities
• Strong project management, communication, and interpersonal skills
• Experience in process governance, with an understanding of processes that align with policies, regulatory frameworks, and/or operational standards
• Proficient analytical and problem‑solving skills, with an ability to analyze data, identify trends, and evaluate risk scenarios effectively

• Bachelor's Degree in Finance, Business, Risk Mgmt., or related field; advanced degrees (e.g., MBA, MSc) or certifications are advantageous
• Experience in at least one of the following:
  • Providing identification of operational risks throughout business processes and systems
  • Facilitating risk assessment performance in addition to further assessments and testing programs to ensure regulatory and internal standards are met
  • Enhancing risk assessments and associated methodologies
  • Reviewing independent control monitoring, including identification of control improvements
  • Identifying areas of risk for intervention, including conducting…