Manager - Tech Risk & Control

At American Express, our culture is built on a 175-year history of innovation, shared values and Leadership Behaviors, and an unwavering commitment to back our customers, communities, and colleagues. As part of Team Amex, you'll experience this powerful backing with comprehensive support for your holistic well-being and many opportunities to learn new skills, develop as a leader, and grow your career.

Here, your voice and ideas matter, your work makes an impact, and together, you will help us define the future of American Express.

Key Responsibilites

Regulatory

• Responsible for Regulatory Submissions like Quarterly RBI KRI submission.

• Responsible for Response to Regulatory Questionnaires/Circulars/Advisories.

• Providing regulatory guidance and training on circulars, advisories, Master Directions etc.

• Manage internal audits , 2nd line

Communication

• Ability to draft and manage Regulatory communication

• Ability to draft and manage Incident Communication

• Ability to draft and manage Technical documentation

Technology

• Understanding of technology tools related to automation, AI, Monitoring, etc

• Hands-on knowledge or functional knowledge of Mainframe applications/platforms

• Proactively address tech-debt and manage tech-led initiatives

• Manages the identification and evaluation of controls and adherence to controls, ensuring effective implementation and reporting

Project / Program Management

• Project planning, implementation, documentation, management

• Help initiate a project (on-boarding resources and access)

• Establish the project plan and tracking of activities.

• Communicate the progress on the project plan to relevant stakeholders

• Oversees the management and integration of several projects simultaneously, adjusting scope, timing, and budgets to efficiently utilize resources and adhere to program timelines and budgets

Stakeholder Management

• Facilitate discussions with key stakeholders across Business, Operations and Technology

• Engaging with India market product team and platform teams for change management.

Technology Risk

• Manage, Mitigate Tech Operational Risks.

Status Reporting

• Periodic updates on deliverables to multiple types of stakeholders catering to different levels

• Prepares and presents detailed management reports and documentation to senior leadership and stakeholders, providing clear and accurate records of various technology assessments, mitigation actions, and compliance status

People

• Adapt to oversee / mentor a team of Technology colleagues, enabling a culture of continuous learning, growth opportunities, and inclusivity for individual colleagues and teams through mentoring, feedback, and metrics, and ensuring adherence to best practices and standards

• Adapt to  provide direct leadership and coaching to Technology teams, supporting training and development of best practices

• Adapt to manage resource allocation, project timeline, and budget for projects, ensuring alignment with organizational goals

• Adapt to collaborate with senior leadership to hire top talent for the team, ensuring a high-functioning and cohesive unit, implementing strategies for talent retention and professional development

• Collaborates and co-creates effectively with teams in product and the business to align technology initiatives with business objectives

• Provides key inputs in training and development programs to enhance skills and knowledge in Technology, ensuring continuous professional growth and the ability to effectively manage current and future risks

Education and Knowledge

• Bachelor's Degree in  Computer Science, Information Systems, Cybersecurity, and/or comparable experience

• Advanced knowledge of global technology standards and applicable regulations

• Advanced knowledge of technology control domains such as Identity & Access Management, Security Architectures, Security Governance & Operations, IT General Controls, Security Testing, and Cloud Security

• Proficiency in enterprise risk management with an emphasis on operational risk management and technology risk

Work Experience

• Experience in technology lifecycle of SDLC, Enabling functions  (Vendor management, GRC, etc), SRE/ Technology Support (L1 + L2)

• Exposure to technology risk & control and information security would be an added advantage

• Experience in processing regulatory requirements and compliance standards in the technology sector

• Experience with tools such as ServiceNow GRC, SAP GRC, LogicGate, RSA Archer, MetricStream, RiskWatch, any AI tool, automation tools, workflow tools such as selenium etc

• Experience with Data Visualization and Reporting tools such as Tableau, PowerBI

We back you with benefits that support your holistic well-being so you can be and deliver your best. This means caring for you and your loved ones' physical, financial, and mental health, as well as providing the flexibility you need to thrive personally and professionally:

• Competitive base salaries 

• Bonus incentives 

• Support for financial-well-being and retirement 

• Comprehensive medical, dental, vision, life insurance, and disability benefits (depending on location) 

• Flexible working model with hybrid, onsite or virtual arrangements depending on role and business need 

• Generous paid parental leave policies (depending on your location) 

• Free access to global on-site wellness centers staffed with nurses and doctors (depending on location) 

• Free and confidential counseling support through our Healthy Minds program 

• Career development and training opportunities

American Express is an equal opportunity employer and makes employment decisions without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran status, disability status, age, or any other status protected by law.  

Offer of employment with American Express is conditioned upon the successful completion of a background verification check, subject to applicable laws and regulations.