Product Security Risk Analyst

Squad - Cabinet De Conseils Et D’Expertises; Madrid; Hybrid; EUR 55,000 - 75,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

American Express is seeking an Analyst in Madrid who will support the Spain CRO team in enhancing risk governance and policy architecture. The role collaborates with local and international stakeholders to strengthen committee governance, risk escalation, and enterprise risk alignment within the second line of defense.

The position emphasizes maintaining and deploying risk management frameworks for AEESA and AEPE, aligning with ILE requirements and governance standards.

Qualifications

• 3-5 years of experience in risk management or a similar role.
• Strong analytical skills and business acumen with a risk-reward control perspective; and the ability to balance commercial objectives with sound risk management.

Responsibilities

• Support maintenance and enhancement of the Risk Governance Framework and the associated second-line governance committee structure for AEESA and AEPE.
• Support the International Legal Entities (ILE) Risk Management policies and the local deployment and execution of AXP second Line frameworks.
• Support the Risk Appetite Framework and adherence to ILE Risk Appetite through challenge of Risk Appetite statements, metrics, limits and management action plans.
• Build and maintain relationships with Enterprise teams to ensure that ILE input to Enterprise risk policies and frameworks is sought and reflected.
• Contribute to ensuring that ILE frameworks and policies are embedded and adhered to and that risk is governed in accordance with the ILE Risk Governance Framework.
• Contribute to ensuring the Governance Committees are appropriately structured, staffed and operate in accordance with their Terms of Reference.
• Support effective escalation of risks to Risk Committee, Board and International Risk Management Committee, and monitor escalated risks through to appropriate resolution.
• Support the oversight of remediation of priority issues, operational risk events and regulatory action plans linked to Risk Committee escalations.

Skills

Risk management

Analytical skills

Business acumen

Job description

Analyst, Risk Governance and Frameworks
Madrid, Spain (Hybrid)Job Description
The Global Risk & Compliance (GRC) organization serves as American Express' independent risk management function. GRC maintains the enterprise risk framework, provides oversight and challenge, and monitors key risks. By embedding risk discipline into strategy and operations, GRC enables responsible growth, innovation, and long‑term value creation while protecting customers and shareholders.
The Spain CRO function is part of the Int'l CRO team, within Global Risk and Compliance (GRC). It is responsible for identifying and overseeing risk across all processes.How will you make an impact in this role?
The Analyst, Risk Governance and Frameworks, within the Spain Chief Risk Officer Team, will support the effective operation and ongoing enhancement of the second line of defense governance structure, risk management frameworks and policy architecture for the Spanish Legal Entities (AEESA and AEPE).
The role will work closely with local and international stakeholders to support effective committee governance, risk escalation, risk appetite oversight and the local implementation of Enterprise and International Legal Entity risk management requirements.Responsibilities

• Support the maintenance and ongoing enhancement of the Risk Governance Framework and the associated second‑line governance committee structure for AEESA and AEPE;
• Support the International Legal Entities (ILE) Risk Management policies and the local deployment and execution of AXP second Line frameworks;
• Support the Risk Appetite Framework and adherence to ILE Risk Appetite through challenge of Risk Appetite statements, metrics, limits and management action plans;
• Build and maintain relationships with Enterprise teams to ensure that ILE input to Enterprise risk policies and frameworks is sought and reflected;
• Contribute to ensuring that ILE frameworks and policies are embedded and adhered to and that risk is governed in accordance with the ILE Risk Governance Framework;
• Contribute to ensuring the Governance Committees are appropriately structured, staffed and operate in accordance with their Terms of Reference;
• Support effective escalation of risks to Risk Committee, Board and International Risk Management Committee, and monitor escalated risks through to appropriate resolution;
• Support the oversight of remediation of priority issues, operational risk events and regulatory action plans linked to Risk Committee escalations.

Qualifications

• 3-5 years of experience in risk management or a similar role;
• Strong analytical skills and business acumen with a risk-reward control perspective; and the ability to balance commercial objectives with sound risk management.

... (continued for all remaining sections, converting the remaining markup similarly) ...