The International Card & Risk Services Technology (ICRST) organization delivers the technology strategy, platforms and solutions that underpin International Card Services and Credit & Fraud Risk across global markets. With approximately 900 colleagues across the UK, US, Canada, India and Mexico, ICRST plays a critical role in shaping enterprise-wide technology outcomes and driving compliance, resilience and innovation.
Responsibilities- Provides technical leadership and guidance on cybersecurity initiatives for Sales Platforms, with a focus on protecting Salesforce applications and data.
- Partners with engineering, technology, product, and business teams to identify cybersecurity risks and develop solutions that align security requirements with business objectives.
- Applies cybersecurity engineering principles to the design, implementation, and ongoing management of technology solutions and security controls.
- Provides cybersecurity expertise and guidance for solutions leveraging the Salesforce platform, including evaluating security considerations associated with platform configurations, integrations, access, and data protection.
- Assesses technology solutions and proposed changes for cybersecurity risks, identifies potential gaps, and recommends appropriate technical controls or remediation strategies.
- Collaborates with Salesforce platform teams, application owners, cybersecurity teams, and other stakeholders to ensure security requirements are appropriately incorporated into technology solutions.
- Supports the development and implementation of secure architecture, engineering standards, technical controls, and cybersecurity best practices.
- Provides technical guidance and mentorship to engineers and cross-functional colleagues, promoting consistent application of cybersecurity engineering practices.
- Investigates complex technical and security challenges, evaluates potential solutions, and provides recommendations based on risk, technical feasibility, and business requirements.
- Facilitates collaboration across cybersecurity, engineering, product, and business teams to support technology changes and implementations while maintaining alignment with organizational security requirements.
- Contributes to the continuous improvement of cybersecurity engineering practices, processes, standards, and controls.
- Evaluates emerging technologies, including AI-enabled capabilities, from a cybersecurity perspective and supports the responsible adoption of tools and technologies in accordance with applicable security and governance requirements.
- Bachelor's degree in Computer Science, Computer Engineering, Cybersecurity, Information Systems, or a related technical discipline, and/or comparable professional experience; advanced degree preferred.
- Strong knowledge of cybersecurity principles, security engineering practices, and approaches for identifying and mitigating technology risk.
- Working knowledge of the Salesforce platform and the cybersecurity considerations associated with Salesforce environments, configurations, integrations, access controls, and data.
- Knowledge of enterprise application and platform security, including identity and access management, authentication, authorization, data protection, integrations, and secure configuration practices.
- Knowledge of security controls and practices across the technology lifecycle, including design, implementation, testing, deployment, and ongoing maintenance.
- Understanding of cybersecurity risk assessment, threat identification, vulnerability management, and security control implementation.
- Knowledge of cloud and SaaS security concepts and their application within enterprise environments.
Awareness of emerging technologies, including AI-enabled capabilities, and associated cybersecurity and governance considerations.
Skills and Experience
- At least 4 years of professional experience in cybersecurity.
- At least 2 years of experience in software engineering, cybersecurity engineering, or a closely related technical engineering discipline.
- At least 1 year of experience working with or supporting solutions on the Salesforce platform, including experience applying cybersecurity or engineering principles within a Salesforce environment.
- Demonstrated ability to identify and assess cybersecurity risks and translate security requirements into practical technical recommendations.
- Experience working with technical and non-technical stakeholders to evaluate technology solutions, identify security considerations, and drive appropriate risk mitigation.
- Experience with enterprise security concepts such as identity and access management, authentication and authorization, data protection, application security, platform security, and secure integrations.
- Ability to understand technical architecture, system integrations, data flows, and platform configurations and evaluate them from a cybersecurity perspective.
- Strong analytical and problem-solving skills, with the ability to evaluate complex technical issues and communicate recommendations clearly.
- Experience collaborating across cybersecurity, engineering, technology, product, and business teams.
- Ability to provide technical guidance and influence engineering and security decisions without requiring direct authority.
- Experience working in Agile or other iterative technology delivery environments.
Strong written and verbal communication skills, including the ability to communicate cybersecurity risks and technical concepts to a range of audiences.
Employment eligibility to work with American Express in the United States is required as the company will not pursue visa sponsorship for these positions.
At American Express, our culture is built on a 175-year history of innovation, shared values and Leadership Behaviors, and an unwavering commitment to back our customers, communities, and colleagues. From delivering differentiated products to providing world-class customer service, we operate with a strong risk mindset, ensuring we continue to uphold our brand promise of trust, security, and service.
As part of Team Amex, you’ll experience our powerful backing with comprehensive support for your holistic well-being and many opportunities to learn new skills, develop as a leader, and grow your career. Here, your voice and ideas matter, your work makes an impact, and together, you will help us define the future of American Express.
Skills Required
- Bachelor's degree in Computer Science, Computer Engineering, Cybersecurity, Information Systems, or a related technical discipline, or comparable professional experience
- At least 4 years of professional cybersecurity experience
- At least 2 years of experience in software engineering, cybersecurity engineering, or a closely related technical engineering discipline
- At least 1 year of experience working with or supporting Salesforce solutions
- Knowledge of cybersecurity principles and security engineering practices
- Knowledge of Salesforce security considerations, including configurations, integrations, access controls, and data protection
- Knowledge of enterprise application and platform security, identity and access management, authentication, authorization, data protection, and secure integrations
- Understanding of cybersecurity risk assessment, threat identification, vulnerability management, and security control implementation
- Knowledge of cloud and SaaS security concepts
- Ability to assess cybersecurity risks and translate security requirements into technical recommendations
- Experience collaborating with technical and non-technical stakeholders to mitigate security risks
- Ability to evaluate technical architecture, system integrations, data flows, and platform configurations
- Strong analytical, problem-solving, written, and verbal communication skills
- Experience collaborating across cybersecurity, engineering, technology, product, and business teams
- Ability to provide technical guidance and influence decisions without direct authority
- Experience working in Agile or other iterative technology delivery environments
- Advanced degree
American Express Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about American Express and has not been reviewed or approved by American Express.
-
Fair & Transparent Compensation — Pay is considered generally solid for many, with frequent mentions of good compensation alongside strong benefits. Overall sentiment points to many employees feeling adequately paid even if it is not viewed as top-of-market.
American Express Insights
What We Do
At American Express, we know that with the right backing, people and businesses have the power to progress in incredible ways. Whether we’re supporting our customers’ financial confidence to move ahead, taking commerce to new heights, or encouraging people to explore the world, our colleagues are constantly striving to uphold our powerful backing promise to our customers and each other every day. These beliefs have been our North Star for 170 years as our business transformed – from helping evacuate travelers during World Wars, to ensuring the safety of our customers’ funds during the Great Depression in the U.S., to creating the Shop Small® movement to help small businesses recover from the Financial Crisis, to providing aid to communities impacted by many natural disasters and so much more. For generations, the key to our success has been the determination and resilience of our American Express colleagues. Now, as a globally integrated payments company, we work together to provide customers with access to products, insights and world-class experiences that enrich lives and build business success. Join us and let’s lead the way together.
.png)
