Senior Associate Tech Risk & Control

Joining ETS Governance & Control means helping protect American Express customers and company through integrated, intelligence-driven technology risk and control management. Operating at the intersection of technology, governance, and risk, the team partners across the enterprise to modernize the foundation, advance risk intelligence, demonstrate trust at scale, and reduce material risk—enabling innovation with the right controls in place.

The objective of the Technology Control Management Associate- Risk Assessments Control Assessments and Reporting team is to identify, assess, mitigate, and report on risks within Technology to ensure adherence to regulatory standards, policies.
Technology is looking for an Analyst focused on ensuring control management is embedded in the day-to-day operations of our organization. It will involve working in a fast-paced environment where extensive collaboration with multiple partners across numerous business units, functional areas, and geographies is required

At American Express, our culture is built on a 175-year history of innovation, shared values and Leadership Behaviors, and an unwavering commitment to back our customers, communities, and colleagues. From delivering differentiated products to providing world-class customer service, we operate with a strong risk mindset, ensuring we continue to uphold our brand promise of trust, security, and service.

As part of Team Amex, you’ll experience our powerful backing with comprehensive support for your holistic well-being and many opportunities to learn new skills, develop as a leader, and grow your career. Here, your voice and ideas matter, your work makes an impact, and together, you will help us define the future of American Express.

• Conduct Risk and Control Self Risk Assessment for business unit (RCSA experience)
• Document and project manage deliverables to completion
• Categorize controls and map to risks (e.g., cross-BU process-control mapping)
• Design and test controls
• Understanding of design effectiveness and operating effectiveness concepts when evaluating control effectiveness
• Proactively help identify certain areas of high-risk for intervention (e.g., automated alerts generated for high-risk areas signal need for intervention and focus), including conducting independent quality assurance and vertical process testing
• Support thematic risk reporting (levels, trends, causes)
   

• 3- 5 + Years experience in risk management in the 1LOD or at a consulting firm
• Understanding of critical operational risk management lifecycle activities, IT risk management, internal/external audit, SOX/ITGC testing, or controls assurance
• Experience in process governance, with an understanding of processes that align with policies, regulatory frameworks, and/or operational standards
• Analytical and problem-solving skills, with an ability to analyze data, identify trends, and evaluate risk scenarios effectively
• Excellent project management skills, highly proficient in Excel and PowerPoint, highly detail-oriented, good communication, and interpersonal skills
• Ability to work in a fast-paced, demanding environment
• Bachelor's Degree in Finance, Business, Risk Mgmt., or related field; advanced degrees (e.g., MBA, MSc) or certifications are advantageous
• Previous technology/cyber risk experience
• Experience in at least one of the following: