Manager, UK Chief Risk Officer, Testing & Monitoring

The Global Risk & Compliance (GRC) organization serves as American Express’ independent risk management function. GRC maintains the enterprise risk framework, provides oversight and challenge, and monitors key risks. By embedding risk discipline into strategy and operations, GRC enables responsible growth, innovation, and long-term value creation while protecting customers and shareholders.
The UK CRO function is part of the Int’l CRO team, within Global Risk and Compliance (GRC). It is responsible for identifying and overseeing risk across all processes.
The Manager, UK Chief Risk Officer, Testing & Monitoring, within the GRC organization, is responsible for establishing and enhancing second-line assurance and testing capabilities. We are seeking an experienced risk leader to be a part of this exciting journey.
Required Experience:
Design and implementation of second-line testing programmes.
Assurance and control testing methodologies.
Integrated assurance frameworks.
Preferred Experience:
Regulatory assurance activities.
FCA-regulated financial services experience.
Minimum Qualifications:
5+ years of experience in risk management or a similar role;
Strong business acumen with a risk-reward control perspective;
Experience in interacting with regulators and familiarity with UK’s regulatory landscape and requirements;
Demonstrated ability to successfully manage multiple priorities under pressure;
Fluency in English (verbal and written);
Advanced degree in business, economics, engineering, or a related field is preferred.
People Skills:
Proven leader who can build, inspire, and coach a team with a passion for the business;
Excellent relationship and influencing skills with the ability to build productive relationships across teams and levels of seniority;
Self-confident with a strong sense of integrity and the ability and willingness to challenge and be challenged;
Proactive in identifying issues, delivering and escalating key findings, and advising on recommended solutions to correct issues or mitigate risks;
Ability to communicate oversight findings to colleagues, business partners, and senior leaders;
Strong verbal and written communication skills.
Lead analyst (s) covering Testing and Monitoring
Employment eligibility to work with American Express in the UK is required as the company will not pursue visa sponsorship for these positions.
Maintain the annual risk assessment for the market's legal entities.
Develop a multi-year testing plan based on the risk assessment, covering all Group risk pillars (Credit, Operational, Compliance, etc.).
Prioritise testing activity using risk-based methodologies.
Align testing activity with enterprise risk assessments.
Support your team in performing the planned second-line control reviews and preparing testing reports. You will communicate review outcomes to senior management and the relevant governance committees.
Define, together with the team, a remediation monitoring program for issues identified during control reviews and oversee the implementation of corrective actions.
Continuously enhance the tools, metrics, and reporting mechanisms used to inform senior management, ensuring that both emerging and existing risks are appropriately identified and managed.
Testing Framework Development by developing second-line testing methodologies, designing supporting policies, standards and procedures, establishing testing governance and quality standards and understanding current practice in testing processes in ILEs and driving ongoing improvement efforts toward implementing consistent best practice.
Integrated Assurance by coordinating assurance activities across first, second and third lines of defence, reducing duplication of testing activities, improving assurance coverage and effectiveness and developing integrated assurance frameworks and assurance maps.
Enterprise Testing Coordination by working with enterprise testing and assurance teams, aligning methodologies and reporting approaches and identifying opportunities for efficiency and consistency.
Reporting and Remediation by developing testing reporting frameworks, reporting findings to management and committees, tracking remediation activities and identifying thematic risks and control weaknesses.

Work arrangement
Hybrid