Job description

As a Senior Information Security Analyst for American Express, the role involves managing operational risk for technology, especially in issue resolution, risk governance, and control enhancement, while ensuring reliability and availability of critical applications. Key skills include risk management, control analysis, cybersecurity knowledge, and proficiency in industry GRC tools.

Responsibility

• Perform hands-on issue resolution management, guidance, and monitoring.
• Collaborate with key team members on operational risk processes.
• Manage and facilitate ownership issues and concerns in risk and Bank forums.
• Facilitate and Lead Technology Ops Excellence risk and governance forums.
• Support Technology partners for effective Issue resolution.
• Build and maintain relationships across Technology and Business Unit Operational Excellence teams.
• Work closely with senior leaders to ensure appropriate risk management, mitigation and/or elimination.
• Partner with key technology leads to implement process improvements and controls.
• Perform thematic root cause analysis and collaborate on recurring technology caused events.
• Lead process redesign efforts for detailed documentation and analysis of OREs and CAPS.

Qualifications

• Bachelor's Degree in related field.
• 5-7 years of risk management, controls analysis, and/or 10+ years issue management/remediation experience required.
• Experience with the development and/or assessment of IT General Controls.
• Deep understanding of compliance, risk management and internal IT control frameworks.
• Outstanding ability to engage, educate, influence, and collaborate across organizations.
• Experience in assessing technology risks and responding through development of controls.
• Experience working with audit, compliance, operational risk, regulatory, and/or control functions.
• Solid ability to synthesize large amounts of data into short key messages and identify and analyze related trends.
• Consistent record of adjusting quickly to shifting priorities, multiple demands, ambiguity and rapid change.
• Strong interpersonal and partnership skills / ability to develop relationships with peers in business unit and central operational risk management group.
• Cybersecurity knowledge.
• Proven ability to translate complex technical information into clear, accessible concepts for diverse audiences.
• Proven experience with industry GRC tools like RSA Archer, OpenPages, MetricStream, etc.
• Strong MS Office skills (Excel, Power Point, Word).
• CISA, CISM, or CRISC is preferred.
• Master's degree is preferred.