Senior Associate Cyber Operations

At American Express, our culture is built on a 175-year history of innovation, shared values and Leadership Behaviors, and an unwavering commitment to back our customers, communities, and colleagues. As part of Team Amex, you'll experience this powerful backing with comprehensive support for your holistic well-being and many opportunities to learn new skills, develop as a leader, and grow your career.

Here, your voice and ideas matter, your work makes an impact, and together, you will help us define the future of American Express.

How will you make an impact in this role?

• Managing TSM operational activities related to third-party onboarding, due diligence including information security assessments & VTAs, Gap management, assessment Quality Check and termination etc.
• Partner with the BU to complete third party risk assessments and ensure adherence to program requirements including pre contract due diligence activities.
• Assist with risk analysis and security posture evaluations of Third Parties to support security assessment activities, including vulnerability threat assessments.
• Work closely with TRIS leadership to help them navigate through TLM onboarding requirements, including coordinating efforts with the TLM team and other stakeholders.
• Manage external assessor's portfolio including pricing negotiation & SoW, assessor onboarding, trainings, operational meetings, task allocation, performance management.
• Review and evaluate the security controls of third-party vendors to ensure they align with the AXP's security standards.
• Manage internal reporting to track operational activities and drive operational excellence.
• Partner with other colleagues in third party security team in sharing inputs towards third party assessment framework, questionnaires and Guidance documents.
• Program Manage and support transformational projects, as and when required, related to Process improvements, System up-gradation and overall Program uplift.
• Conduct training and awareness sessions for internal stakeholders on third-party security risks and best practices.
• Foster strong relationships with Business colleagues to promote security best practices and collaboration.
• Support with security initiatives and regulatory reviews, as required.

Requirements / Qualifications

• Thorough knowledge of information security components, principles, practices, procedures, frameworks (e.g., NIST, ISO and regulatory requirements.
• 5+ years of experience in Third-Party Risk and Operations; including working with complex and dynamic functions and solutions.
• A broad understanding of the IT controls and best practices across key information security risk domains.
• Prior experience managing risk assessments; including background in audit, information security, Third Party Risk/Oversight, or other risk control functions.
• Proficiency in risk assessment methodologies and third-party risk management tools.
• Attention to Detail: Careful evaluation of vendor security practices and documentation.
• Excellent communication, negotiation, and stakeholder management skills, able to effectively communicate at all levels within the organization.
• Being flexible and able to adjust to new needs and new technologies, and be comfortable with ambiguity.
• Strategic Thinking: Ability to align third-party security with broader organizational objectives.
• Relevant certifications such as CISSP, CISM, CISA, CRISC, ISO 27001 are preferred.

We back you with benefits that support your holistic well-being so you can be and deliver your best. This means caring for you and your loved ones' physical, financial, and mental health, as well as providing the flexibility you need to thrive personally and professionally:

• Competitive base salaries
• Bonus incentives
• Support for financial-well-being and retirement
• Comprehensive medical, dental, vision, life insurance, and disability benefits (depending on location)
• Flexible working model with hybrid, onsite or virtual arrangements depending on role and business need
• Generous paid parental leave policies (depending on your location)
• Free access to global on-site wellness centers staffed with nurses and doctors (depending on location)
• Free and confidential counseling support through our Healthy Minds program
• Career development and training opportunities

American Express is an equal opportunity employer and makes employment decisions without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran status, disability status, age, or any other status protected by law.

Offer of employment with American Express is conditioned upon the successful completion of a background verification check, subject to applicable laws and regulations.