Associate, Technology Risk & Control

American Express; London; Hybrid; GBP 45,000 - 70,000; Full time

Job summary

American Express seeks an Associate in Technology Risk & Control to facilitate risk identification and compliance within technology environments. Responsibilities include conducting assessments, ensuring adherence to standards, and collaborating across teams. This role offers competitive salaries and comprehensive benefits for holistic well-being.

Benefits

Competitive base salaries

Bonus incentives

Comprehensive medical, dental, and vision insurance

Flexible working model

Free access to wellness centers

Career development and training opportunities

Qualifications

• Bachelor's Degree in a relevant field required.
• Knowledge of regulatory compliance and security standards necessary.
• Experience in enterprise risk management and disaster recovery.

Responsibilities

• Conduct risk assessments to identify weaknesses in technology environments.
• Ensure adherence to resilience policies and standards.
• Prepare documentation for risk management activities.

Skills

Operational Resilience

Disaster Recovery

Knowledge of regulatory compliance

Enterprise risk management

Technology controls

Education

Bachelor's Degree in Computer Science

Information Systems

Cybersecurity

Job description

At American Express, our culture is built on a 175-year history of innovation, shared values and Leadership Behaviors, and an unwavering commitment to back our customers, communities, and colleagues. As part of Team Amex, you'll experience this powerful backing with comprehensive support for your holistic well-being and many opportunities to learn new skills, develop as a leader, and grow your career.

Here, your voice and ideas matter, your work makes an impact, and together, you will help us define the future of American Express.

Associate, Technology Risk & Control facilitates the identification, assessment, and mitigation of technology risks by conducting thorough risk evaluations, developing risk management strategies, and ensuring compliance with industry standards and regulatory requirements. Ensures that technology teams are meeting the requirements set forth in the Technology Resilience policies and standards. Assists in reporting to various stakeholders throughout the company.

How will you make an impact in this role?

Key Responsibilities:

• Conducts assessments to identify potential risk within the organization's technology environments, ensuring that technology resilience areas are evaluated for weaknesses
• Ensures Technology teams are adhering to the organization's Resilience related policies and standards. Communicates and reports on successes and gaps
• Prepares reports and documentation to support risk management activities and compliance efforts, for internal stakeholders and leaders
• Conducts risk assessments to determine the residual risk within the organization's technology environments, ensuring all areas are evaluated for non-compliance
• Supports the identification and evaluation of controls and adherence to controls
• Collaborates and co-creates effectively with teams in product and the business to align technology initiatives with business objectives

Minimum Qualifications:

• Bachelor's Degree in Computer Science, Information Systems, Cybersecurity, and/or comparable experience
• Knowledge of regulatory compliance and security standards (e.g., ISO, NIST, FFIEC Handbooks, GDPR)
• Foundational knowledge of global technology standards and applicable regulations
• Foundational knowledge of technology control domains such as Disaster Recovery, Business Continuity Management, Security Governance & Operations, IT General Controls, Security Testing, and Cloud Security
• Skilled in enterprise risk management with an emphasis on operational risk management and technology risk
• Experience working in teams to successfully complete projects in Computer Science, Information Systems, and/or Cybersecurity
• Experience working with teams in Technology Resilience / Disaster Recovery
• DORA (Digital Operational Resilience Act)
• ORMCM

Key requirements

• Operational Resilience
• Disaster Recovery
• Understanding of regulatory environment

Technology Risk Experience

• Controls
• Regulations
• Disaster Recovery

Under regulations, must have:

• Disaster Recovery experience
• Incident Problem & Change Management

We back you with benefits that support your holistic well-being so you can be and deliver your best. This means caring for you and your loved ones' physical, financial, and mental health, as well as providing the flexibility you need to thrive personally and professionally:

• Competitive base salaries
• Bonus incentives
• Support for financial-well-being and retirement
• Comprehensive medical, dental, vision, life insurance, and disability benefits (depending on location)
• Flexible working model with hybrid, onsite or virtual arrangements depending on role and business need
• Generous paid parental leave policies (depending on your location)
• Free access to global on-site wellness centers staffed with nurses and doctors (depending on location)
• Free and confidential counseling support through our Healthy Minds program
• Career development and training opportunities

Offer of employment with American Express is conditioned upon the successful completion of a background verification check, subject to applicable laws and regulations.