Jobs at American Express

Supports modernization of customer risk-rating products by translating business needs into product capabilities, managing backlogs, defining requirements, and improving data quality. Analyzes data sources, mappings, standardization, availability, and gaps while coordinating Product, Technology, Compliance, Data Governance, and business stakeholders. Participates in Agile delivery, tracks dependencies and risks, facilitates working sessions, documents decisions, and communicates platform progress and impact to leadership.

Manage privacy risk controls across business processes, products, systems, and third parties. Responsibilities include conducting privacy risk assessments and RCSAs, evaluating control design and effectiveness, identifying control gaps, managing remediation, translating privacy requirements into operational controls, documenting evidence, and developing risk dashboards. The role partners with regulatory advisory teams, business owners, and cross-functional stakeholders to strengthen privacy risk management and monitor incidents, failures, and assessment results.

Supports model review and regulatory adherence monitoring activities. Reviews regulatory requirements, business processes, controls, evidence, models, variables, and decisioning strategies; identifies compliance gaps; documents findings; and escalates issues. Partners with Model Risk, Compliance, Privacy, Legal, and business stakeholders on governance initiatives involving privacy, consumer protection, AI, and emerging regulations.

Leads enterprise risk management framework adherence and effective challenge across American Express. Designs and executes risk governance processes, establishes accountability, develops guidance and training, reports findings and themes to senior management and the board, supports quality control and regulatory reporting, facilitates UAT and onboarding, and coordinates reviews with regulators, Internal Audit, and stakeholders.

Validates and submits KYC, legal entity, and CKYC information in compliance with RBI regulations. Completes video KYC, reviews customer and legal entity documents, identifies gaps, verifies card applications, assesses account risk, updates systems, and handles inbound and outbound customer calls. The role requires meeting quality, productivity, compliance, and timeline targets while supporting customers through the KYC completion process.

Manages privacy risk controls across business processes, products, systems, and third parties. Responsibilities include conducting privacy risk assessments and RCSAs, evaluating control design and effectiveness, identifying gaps, managing remediation, translating privacy requirements into operational controls, documenting evidence, supporting automation, and developing risk dashboards. The role collaborates with regulatory, business, and cross-functional stakeholders to monitor privacy incidents, control failures, and compliance exposure.

Supports credit and fraud risk control management through risk and control self-assessments, process and control mapping, monitoring, testing, quality assurance, and thematic reporting. The role identifies operational risks and control gaps, evaluates compliance with regulatory and internal standards, analyzes trends, and collaborates with business units and process owners across functions and geographies.

Supports and enhances Oracle financial systems across EBS and Fusion Cloud, including GL, AHCS, and related modules. Provides application support, access governance, maintenance, testing, deployment, migration, audit compliance, financial controls, and post-production support. Partners with Finance, Technology, and business stakeholders on process standardization, automation, metrics, and continuous improvement. Requires shift flexibility for 24/7 support during month-end close.

Supports the Credit and Fraud Risk control framework by identifying operational risks, assessing inherent and residual risk, documenting and evaluating controls, maintaining control inventories and dashboards, and reporting emerging risks and control gaps. The role partners with Risk, Compliance, Internal Audit, business process owners, and other stakeholders to enhance control design, process resilience, governance, and regulatory alignment across business units and geographies.

Supports regulatory risk management across U.S. and international markets by managing regulatory inquiries, researching laws and regulations, assessing business impacts, documenting analysis, and partnering with Legal, Compliance, Privacy, and risk stakeholders. The role interprets requirements affecting processes, controls, decisioning, and data use, escalates complex matters, and contributes to regulatory control management.

Develops and owns scalable personalization software on GCP using Java and Python. Designs cloud-native, microservices, batch, real-time data processing, and distributed systems; writes code and tests, performs architecture and code reviews, supports application availability, and collaborates with product owners. Drives agile engineering practices, technical planning, continuous improvement, innovation, and mentorship across enterprise platforms.

Owns the roadmap and delivery of financial crimes investigation products, including AML investigations, transaction analysis, quality control, and enhanced due diligence. Translates business, data, and customer needs into requirements and Agile delivery plans. Partners with data science, technology, architecture, risk, legal, compliance, and security teams on solution design, integrations, controls, governance, auditability, and operational performance.

Own the roadmap for platform integration capabilities and developer experience, enabling Amex teams and approved partners to build secure agent-enabled experiences. Lead discovery, requirements, onboarding, testing, documentation, adoption, and iterative improvement. Partner with engineering, identity, security, analytics, architecture, legal, compliance, and product teams to define reusable authentication and authorization patterns, manage dependencies, prioritize investments, and improve integration reliability and developer outcomes.

Leads commercial product strategy for Small Business and Corporate Card products, owning product architecture, customer journeys, portfolio performance, marketing initiatives, digital enablement, governance, risk controls, compliance, and operational improvement. Manages cross-functional initiatives, vendors, agencies, contracts, and stakeholder relationships while using analytics, KPIs, dashboards, and P&L insights to identify growth opportunities and improve customer and business outcomes.

Designs and builds enterprise CRM capabilities integrating Salesforce, GCP, APIs, and data platforms. Responsibilities include scalable data pipelines, event-driven architectures, data modeling, federation, security, API development, observability, governance, reliability, CI/CD, and infrastructure automation. Provides technical leadership, partners across engineering and product teams, and mentors colleagues while delivering secure, high-volume CRM and data solutions.

Build foundational enterprise agentic AI platform capabilities, including agent runtimes, control planes, governance, security, discovery, observability, evaluation, developer tooling, and AI-specific CI/CD. Design scalable distributed services, APIs, integrations, SDKs, and automation supporting agent deployment across multiple models and platforms. Establish secure, reliable, explainable, and cost-efficient production patterns while partnering with product, infrastructure, security, risk, and governance teams.

Develops enterprise internal fraud reporting, dashboards, scorecards, KRIs, KPIs, and executive insights. Performs deep-dive analyses, ensures data accuracy and governance, supports regulatory and audit requests, and presents recommendations to senior leadership. Uses Tableau, Power BI, SQL, SAS, Excel, and PowerPoint to transform complex fraud and control data into actionable business intelligence and interactive reporting.

Manage and execute global and regional internal audits across financial, operational, compliance, and technology risk areas. Analyze data and controls, develop analytic tests, assess findings, draft reports, present results to senior management, and ensure audits meet professional standards and timelines. The role also involves mentoring junior staff, managing team utilization, collaborating across regions, and applying data-driven auditing practices.

Supports business-critical production applications and technology services in a 24x7 environment. Leads major incident bridges, coordinates application, infrastructure, network, cloud, engineering, SRE, and third-party teams, drives service restoration, communicates business impact, maintains incident records, contributes to root cause analysis, and improves operational procedures, monitoring, resilience, and support readiness.

Lead privacy-focused internal audits from planning through reporting, assessing data privacy, protection, governance, and regulatory controls. Manage audit engagements, develop testing procedures, evaluate findings, guide corrective actions, monitor risk trends, and collaborate with stakeholders, regulators, and external auditors. Mentor geographically distributed audit teams, review workpapers, and provide feedback. The role requires expertise in privacy regulations, control frameworks, risk-based auditing, emerging technologies, and financial-services environments.