Senior Information Security Manager

You Lead the Way. We’ve Got Your Back.

With the right backing, people and businesses have the power to progress in incredible ways. When you join Team Amex, you become part of a global and diverse community of colleagues with an unwavering commitment to back our customers, communities and each other. Here, you’ll learn and grow as we help you create a career journey that’s unique and meaningful to you with benefits, programs, and flexibility that support you personally and professionally.

At American Express, you’ll be recognized for your contributions, leadership, and impact—every colleague has the opportunity to share in the company’s success. Together, we’ll win as a team, striving to uphold ourcompany valuesand powerful backing promise to provide the world’s best customer experience every day. And we’ll do it with the utmost integrity, and in an environment where everyone is seen, heard and feels like they belong.

Join Team Amex and let's lead the way together.

The Technology organization partners with the American Express business to enable, support, and drive the company’s growth plans and strategic priorities by supporting the delivery and operations of technology capabilities, platforms, and services globally. Specifically, the team delivers global capabilities and services in support of American Express customers and colleagues, and it is responsible for the company’s technology infrastructure, providing 24x7 support to ensure an uninterrupted, high-quality experience for external and internal customers. It also governs technology risk and information security across the American Express enterprise.

The objective of the Technology Control Management Issues, Events & Remediation team is to ensure timely identification, response, and resolution of risk events and issues to minimize impact, as well as to prevent recurrence through effective remediation and lesson learning.

Technology Control Management is looking for a Senior Information Security Manager of Issues, Events & Remediation to lead a diverse team of high-performing professionals focused on ensuring control management is embedded in the day-to-day operations of our organization. It will involve extensive collaboration with multiple partners across numerous business units, functional areas, and geographies.

The Senior Information Security Manager, Technology Control Management Issues, Events & Remediation will:

• Scope, triage (prioritize), and support remediation of issues by influencing BU, who own and execute issue/Operational Risk Event (ORE) remediation
• Investigate and conduct root cause analysis while also addressing repeated issue types
• Perform quality assurance on documentation of issue/ORE type, urgency, severity/impact (e.g., impact analysis), and investigate as necessary to understand and address the root causes
• Oversee the remediation process, including tracking progress, validate resolution efficacy, and communicate status updates to stakeholders to embed accountability along the process, collaborating with other Operational Risk Management (ORM) / Control Management teams as necessary
• Document and maintain records of issues/OREs and remediations to ensure transparency and accountability in the issue management process
• Analyze trends in issues and events to identify potential systemic risks or control weaknesses within BU processes
• Support and oversee the End-to-End (E2E) issue resolution process, embedding accountability and ensuring lessons learned are integrated into future ORM practices
• Perform sample testing of issues to ensure resolution is complete and effective
• Opine on specific control enhancements related to issues
• Engage with key stakeholders, including business unit leaders, compliance officers, and regulatory bodies, to facilitate effective issue management and resolution
• Prepare and present detailed reports on issue status, trends, and outcomes to senior management and governance committees
• Be a key leader for sharing insights, better practices, themes, etc. across the enterprise
• Build cordial working relationship across stakeholders including Technology, Compliance, ECMU, ORGG and peer CM teams among others.

• Required Qualifications: 
• 6+ Years experience in operational risk management Understanding of critical operational risk management lifecycle activities
• Excellent project management, communication, and interpersonal skills, with an ability to interact and obtain buy-in from senior BU/tech counterparts
• Expertise in process governance, with a track record of establishing and overseeing robust decision-making processes that align with policies, regulatory frameworks, and/or operational standards
• Experience within financial services industry
• Strong analytical and problem-solving skills, with an ability to analyze data, identify trends, and evaluate risk scenarios effectively
• Demonstrated history and ability to manage large teams, spread over geographies and with varying backgrounds
• Have executive presence and be able to provide status updates to senior leadership.

Preferred Qualifications:

• Bachelor's Degree in Finance, Business, Risk Mgmt., or related field; advanced degrees (e.g., MBA, MSc) or certifications are advantageous
• Experience in at least one of the following: 

oScoping, prioritizing, and support remediation of operational issues

oInvestigating and conducting root cause analysis to address repeated operational risk issue types

oPerforming quality assurance on documentation of operational risk issues and events

oOverseeing the remediation process for operational risk issues and events

oDocumenting and maintaining records of operational risk issues and events to ensure transparency and accountability

oSupporting and overseeing the E2E issue resolution process, embedding accountability and ensuring lessons learned are integrated into future operational risk management practices

We back our colleagues and their loved ones with benefits and programs that support their holistic well-being. That means we prioritize their physical, financial, and mental health through each stage of life. Benefits include:

• Competitive base salaries 
• Bonus incentives 
• Support for financial-well-being and retirement 
• Comprehensive medical, dental, vision, life insurance, and disability benefits (depending on location) 
• Flexible working model with hybrid, onsite or virtual arrangements depending on role and business need 
• Generous paid parental leave policies (depending on your location) 
• Free access to global on-site wellness centers staffed with nurses and doctors (depending on location) 
• Free and confidential counseling support through our Healthy Minds program 
• Career development and training opportunities

American Express is an equal opportunity employer and makes employment decisions without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran status, disability status, age, or any other status protected by law.  

Offer of employment with American Express is conditioned upon the successful completion of a background verification check, subject to applicable laws and regulations.