Manager - Control Management

U.S. Consumer Services (USCS) is responsible for our suite of consumer products, services, and experiences in the U.S., including our premium, cobrand, cash back, and lending portfolios, Membership Rewards, Global Travel & Lifestyle Services, the Centurion Lounge network, our Global Dining and Resy businesses, U.S. Consumer Banking, and best-in-class marketing programs across customer, prospect, and partner channels. The USCS team is focused on making membership an indisputable competitive advantage and helping each other become better leaders every day.

The USCS Control Testing & Monitoring Strategy team is responsible for defining and advancing the control testing and monitoring framework across USCS, ensuring effective identification, assessment, and mitigation of operational risk while strengthening business resilience and regulatory compliance.

We are looking for Manager, Control Testing & Monitoring Strategy, to lead the control testing and monitoring strategy, ensuring risk-based coverage, high-quality execution oversight, and the translation of testing outcomes into actionable risk insights using Data, Analytics, and AI. This role involves extensive collaboration with multiple partners across numerous business units, functional areas, and geographies. 

At American Express, our culture is built on a 175-year history of innovation, shared values and Leadership Behaviors, and an unwavering commitment to back our customers, communities, and colleagues. From delivering differentiated products to providing world-class customer service, we operate with a strong risk mindset, ensuring we continue to uphold our brand promise of trust, security, and service.

As part of Team Amex, you’ll experience our powerful backing with comprehensive support for your holistic well-being and many opportunities to learn new skills, develop as a leader, and grow your career. Here, your voice and ideas matter, your work makes an impact, and together, you will help us define the future of American Express.

The Manager, Control Testing & Monitoring Strategy will:

• Define and maintain the risk-based control testing and monitoring strategy, aligned to inherent risk, control criticality, and enterprise policy requirements
• Develop a centralized control testing plan and master testing calendar, incorporating risk-based frequencies, trigger-based testing events, and regulatory commitments
• Oversee control testing across the Business unit to ensure risk-based coverage, high quality execution, and timely escalation of gaps and delays
• Implement control testing standards and lead quality assurance (QA) programs to ensure consistent, rigorous and audit-ready outputs
• Build and evaluate risk dashboards to aggregate and analyze control testing results and issues to identify systemic weaknesses, root causes, and thematic risks and monitor control effectiveness
• everage data, advanced analytics, and AI capabilities (e.g., GenAI, automated pattern detection) to enhance testing prioritization, identify emerging risks, and drive continuous improvement in testing and monitoring effectiveness
• Analyze the control inventory and advise key stakeholders on opportunities for control enhancements
• Partner with stakeholders to support the categorization and mapping controls to risks, processes, and regulatory requirements
• Drive the automation strategy for manual controls and processes to enhance scalability, efficiency, and risk coverage, including adoption of scalable approaches such as Analytical Control Monitoring (ACM)

• 4+ years of experience in operational risk, internal audit, or control management, with a strong understanding of the operational risk management lifecycle (e.g., RCSA, control testing, issue management)
• Strong analytical and problem-solving skills, with the ability to analyze large data sets, identify trends, and translate findings into actionable risk insights
• Proven ability to influence across functions without direct authority and collaborate effectively in a matrixed environment
• Strong project and stakeholder management skills, with the ability to drive clarity in complex situations and communicate risk topics effectively to senior stakeholders
• Understanding of process and control governance, including alignment to internal policies, regulatory expectations, and operational standards

Preferred Qualifications:

• Bachelor’s or Master’s degree in Finance, Business, Risk Management, or related field; advanced degrees or certifications (e.g., CPA, CIA, FRM) preferred
• Experience with control testing frameworks and control effectiveness evaluation (e.g., Test of Design, Test of Operating Effectiveness, risk-based testing approaches)
• Experience in one or more of the following:
  • Risk identification and assessment within business processes and systems
  • Enhancing RCSA or risk assessment methodologies
  • Control testing, monitoring, or quality assurance (QA) activities
  • Thematic risk analysis, including root cause identification and trend analysis
• Experience leveraging data and analytics to inform risk decisions, including use of dashboards, reporting tools, or automation
• Experience in financial services or a highly regulated industry
• Exposure to advanced analytics or AI-enabled tools (e.g., data analysis, pattern detection, or GenAI applications) to support risk analysis or process improvement