Security Expert Leader

Information Security Director

We are seeking an experienced Information Security Director to lead our information security control enforcement, cybersecurity awareness, reporting, and enablement initiatives. The successful candidate will be responsible for expanding our first-line Bank Information Security program, managing Information Security risks unique to the Bank, and ensuring compliance with all policy and regulatory obligations.

The role will work closely with the Regional Information Security Office (RISO) and in-market Bank and Business leadership team to connect security best practices in the context of market strategy to form a Bank-specific perspective on risk and compliance.

Key Responsibilities:

• Partner with Information Technology Risk Management on information risk assessment and reporting related to AEBC.
• Consult on projects to ensure appropriate security protection is delivered as part of any solution.
• Support and manage the audit and examination requirements from RISO function, including close partnership with the Privacy Office, Compliance, General Council, and the broader Information Security organization.
• Operate as part of the extended Information Security leadership team in support of all security and compliance initiatives.
• Manage the interconnection of core information security functions, Regional Information Security office, and American Express Bank Corp (AEBC).
• Contribute to the first-line information security risk management and reporting in partnership with the Risk organizations within American Express Bank Corp.
• Establish and manage framework of governance on information security controls in complex outsourced environment.
• Liaise with 3rd party risk team, ensuring vendors establish and effectively accommodate American Express standards and needed specifications.
• Draft RFP and contractual requirement for new 3rd party engagement for AEBC.
• Participate in on-going vendor compliance engagements from an information security perspective.
• Address intensified vendor issues on behalf of Information Security team.
• Deliver leadership reporting and risk metrics that demonstrate the effectiveness of vendors' cybersecurity programs.
• Participate and lead vendor-specific regulatory change implementation.
• Actively contribute to the American Express Banking Corp 3rd party related Information Security Risk Working Group and management of the inherent and residual cybersecurity risk profile of the bank.
• Participate and present 3rd party related risks in America Express Banking Corp committee structure.

13 years of Information Security or Technology Risk Management leadership experience.

5 years of experience working with regulators and in complex regulated businesses.

Previous board or committee presentation experience.

Solid written and oral presentation skills are required.

Understanding of regulatory requirements across India Market.

Broad understanding of information security disciplines with emphasis on vulnerability management, data protection, infrastructure security, application security, identity and access, incident management, cloud, and data analytics.

Experience with India Data Localization and PCI requirements.

Strong risk management acumen with the ability to link threats to risk tolerance and control effectiveness measurements.

Commensurate academic credentials, bachelors degree, Masters Degree Preferred, and security certifications.

Previous people leadership experience is strongly preferred.

We back our colleagues and their loved ones with benefits and programs that support their holistic well-being.

That means we prioritize their physical, financial, and mental health through each stage of life.

Benefits include competitive base salaries, bonus incentives, support for financial-well-being and retirement, comprehensive medical, dental, vision, life insurance, and disability benefits depending on location.

Flexible working model with hybrid onsite or virtual arrangements depending on role and business need.

Generous paid parental leave policies depending on your location.

Free access to global on-site wellness centers staffed with nurses and doctors depending on location.

Free and confidential counseling support through our Healthy Minds program.

Career development and training opportunities.

American Express is an equal opportunity employer.

Makes employment decisions without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran status, disability status, age, or any other status protected by law.

Offer of employment with American Express is conditioned upon the successful completion of a background verification check subject to applicable laws and regulations.