How will you make an impact in this role?
The Global Risk & Compliance (GRC) organization serves as American Express’ independent risk management function. GRC maintains the enterprise risk framework, provides oversight and challenge, and monitors key risks. By embedding risk discipline into strategy and operations, GRC enables responsible growth, innovation, and long-term value creation while protecting customers and shareholders.
The Technical Risk Management (TRM) team safeguards the enterprise, globally, by identifying, assessing, monitoring & reporting risks across Information & Cyber Security Risk, Technology Risk, Data Risk, Resiliency Risk, and AI Risk.
Cybersecurity Risk Management (CRM) is a part of TRM and is responsible for the independent cybersecurity risk management across applications and infrastructure at American Express.
CRM is hiring for an Associate who will support CRM in leading the governance, strategy and risk management for cybersecurity risks across American Express. This Associate will also assist with supporting cybersecurity committees and other forums. This Associate will report to the Cybersecurity Risk Management Manager and be part of the team that will manage cybersecurity risk frameworks and support core cyber domains, such as Third-party Security Management, Risk Exception/ Treatment and Cyber Resilience.
ResponsibilitiesSupport the risk management oversight of Cybersecurity risk across core disciplines by leveraging technical expertise and AI, automation, and analytics.
Assess information security risk management activities, including but not limited to security standards, control effectiveness, cybersecurity initiatives, and risk reporting.
Identify potential risks and issues affecting the company and leveraging enterprise frameworks to record identified risks and issues.
Support and coordinate executive risk reporting for areas such as: cybersecurity risk committees, internal and external audits, and broader enterprise risk initiatives.
Monitor laws, rules, regulations and industry best practices related to cybersecurity risk.
Minimum Qualifications:
Bachelor's degree in business, cybersecurity, technology, or equivalent.
Four years of risk management experience in cybersecurity or technology across one or more lines of defense.
Experience within Cybersecurity or Technology disciplines, such as Third-party Risk Management, Exceptions Management, Vulnerability Management, Incident Management, Data Security, Identity and Access Management, or experience with Cybersecurity risk management policy development.
Preferred Qualifications:
Three years of experience in the financial services industry.
Degree in Cybersecurity, Information Technology, Computer Science, Data Science, or equivalent.
Cybersecurity, technology, or risk management certification (CISSP, CCSP, CEH, CISM, etc.)
Experience with regulatory and industry technology or cybersecurity frameworks and guidance (CRI Sector Profile, NIST, FFIEC, COBIT)
At American Express, our culture is built on a 175-year history of innovation, shared values and Leadership Behaviors, and an unwavering commitment to back our customers, communities, and colleagues. From delivering differentiated products to providing world-class customer service, we operate with a strong risk mindset, ensuring we continue to uphold our brand promise of trust, security, and service.
As part of Team Amex, you’ll experience our powerful backing with comprehensive support for your holistic well-being and many opportunities to learn new skills, develop as a leader, and grow your career. Here, your voice and ideas matter, your work makes an impact, and together, you will help us define the future of American Express.
About the TeamWe back you with benefits that support your holistic well-being so you can be and deliver your best. This means caring for you and your loved ones' physical, financial, and mental health, as well as providing the flexibility you need to thrive personally and professionally:
- Competitive base salaries
- Bonus incentives
- Support for financial-well-being and retirement
- Comprehensive medical, dental, vision, life insurance, and disability benefits (depending on location)
- Flexible working model with hybrid, onsite or virtual arrangements depending on role and business need
- Generous paid parental leave policies (depending on your location)
- Free access to global on-site wellness centers staffed with nurses and doctors (depending on location)
- Free and confidential counseling support through our Healthy Minds program
- Career development and training opportunities
American Express is an equal opportunity employer and makes employment decisions without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran status, disability status, age, or any other status protected by law.
Offer of employment with American Express is conditioned upon the successful completion of a background verification check, subject to applicable laws and regulations.
Skills Required
- Bachelor's degree in business, cybersecurity, technology, or equivalent
- Four years of risk management experience in cybersecurity or technology across one or more lines of defense
- Experience within Cybersecurity or Technology disciplines (Third-party Risk Management, Exceptions Management, Vulnerability Management, Incident Management, Data Security, Identity and Access Management)
- Three years of experience in the financial services industry
- Degree in Cybersecurity, Information Technology, Computer Science, Data Science, or equivalent
- Cybersecurity, technology, or risk management certification (CISSP, CCSP, CEH, CISM, etc.)
- Experience with regulatory and industry technology or cybersecurity frameworks and guidance (CRI Sector Profile, NIST, FFIEC, COBIT)
American Express Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about American Express and has not been reviewed or approved by American Express.
-
Healthcare Strength — Pay is often viewed as attractive when combined with comprehensive health, dental, and vision coverage that supports day-to-day needs. The benefits package is also framed as especially helpful for those supporting dependents.
-
Retirement Support — Retirement benefits are positioned as a meaningful part of total rewards through a 401(k) plan with company matching. Financial wellness services and coaching are also highlighted as strengthening longer-term financial security.
-
Leave & Time Off Breadth — Paid time off is repeatedly characterized as generous and a valued component of the overall package. Time off and flexibility are presented as helping the total rewards feel more complete beyond base salary.
American Express Insights
What We Do
At American Express, we know that with the right backing, people and businesses have the power to progress in incredible ways. Whether we’re supporting our customers’ financial confidence to move ahead, taking commerce to new heights, or encouraging people to explore the world, our colleagues are constantly striving to uphold our powerful backing promise to our customers and each other every day. These beliefs have been our North Star for 170 years as our business transformed – from helping evacuate travelers during World Wars, to ensuring the safety of our customers’ funds during the Great Depression in the U.S., to creating the Shop Small® movement to help small businesses recover from the Financial Crisis, to providing aid to communities impacted by many natural disasters and so much more. For generations, the key to our success has been the determination and resilience of our American Express colleagues. Now, as a globally integrated payments company, we work together to provide customers with access to products, insights and world-class experiences that enrich lives and build business success. Join us and let’s lead the way together.
