Manager, Risk ID, Assessment, Testing & Reporting

International Card Services (ICS) brings together our International Consumer and Small & Medium Size Enterprises (SME) issuing activities, as well as our Commercial Large Market sales and account development teams. ICS issues Cards in 27 countries, and is responsible for two Joint Ventures covering around a dozen countries. The leaders in these countries are empowered to make decisions at a local level, in partnership with other local business leaders. Local teams are supported by two cross-market teams – the Centre of Excellence, and Risk & Control Management.
ICS Governance & Control sits within International Card Services (ICS) which comprises of all the issuing functions across all 28 international markets excluding the US - colleagues operate across a variety of geographies and disciplines. ICS issues products to our Consumer and Commercial customers – the organization is an integral part of the global growth strategy for American Express; offering differentiated products and services is critical to our success and promises to drive significant growth and value through the delivery of innovative products, tailored to the needs of our customers.
The objective of the ICS Control Management Risk ID, Assessment, Testing and Reporting team is to identify, assess, mitigate, and report on Operational Risk within BU processes for ICS to ensure adherence to regulatory standards, Amex policy and enhance the BU's resilience through managing a clear methodology of inherent and residual risk.
How will you make an impact in this role?
ICS Control Management is looking for a Manager of Risk ID, Assessment, Testing & Reporting focused on ensuring control management is embedded in the day-to-day operations of our organization. It will involve extensive collaboration with multiple partners across numerous business units, functional areas, and geographies.
Minimum Qualifications:
5+ Years experience in operational risk management (e.g., within Risk and/or Internal Audit function)
Understanding of critical operational risk management lifecycle activities
Strong project management, communication, and interpersonal skills
Experience in process governance, with an understanding of processes that align with policies, regulatory frameworks, and/or operational standards
Proficient analytical and problem-solving skills, with an ability to analyze data, identify trends, and evaluate risk scenarios effectively
Preferred Qualifications:
Bachelor's Degree in Finance, Business, Risk Mgmt., or related field; advanced degrees (e.g., MBA, MSc) or certifications are advantageous
Experience in at least one of the following:
Providing identification of operational risks throughout business processes and systems
Facilitating risk assessment performance in addition to further assessments and testing programs to ensure regulatory and internal standards are met
Enhancing risk assessments and associated methodologies
Reviewing independent control monitoring, including identification of control improvements
Identifying areas of risk for intervention, including conducting independent quality assurance and process testing
Reviewing thematic risk reporting to provide actionable insights on risk levels, emerging trends and root causes
Experience in financial services industry
ORMCM
Employment eligibility to work with American Express in the UK is required as the company will not pursue visa sponsorship for these positions.
The Manager, ICS Control Management Risk ID, Assessment, Testing & Reporting will:
Provide additional identification of risks throughout business processes and systems (along with business process owners)
Facilitate BUs in their risk assessments performance (e.g., Risk Control Self Assessment (RCSA)) in addition to further assessments and testing / QA programs to ensure regulatory and internal standards are met (e.g., periodic RCSA reviews and update assessment criteria to align with regulatory updates)
Conduct control monitoring (supplemental to BU process owners testing) and compile key operational risk trends, activities, and events
Proactively help identify areas of high-risk for intervention (e.g., automated alerts generated for high-risk areas signal need for intervention and focus), including conducting independent quality assurance and vertical process testing
Compile thematic risk reporting (levels, trends, causes) to provide actionable insights to BU on current risk levels, emerging trends and root causes
Review categorization of controls and map against risks and processes (e.g., cross-BU process-control mapping)
Advise BU with identification of risks and spotting areas where product changes or improved controls may be required within New Product Governance (NPG)
Support risk management practices within the business
Review risk dashboards and key risk indicators (KRIs) for ongoing monitoring
Review risk profiles and an updated risk register(s)
Support sharing insights, better practices, themes, etc. across the enterprise

Work arrangement
Hybrid