Senior Manager, UK Chief Risk Officer, Technology Risk

American Express; Greater London; On-site; GBP 90,000 - 130,000; Full time

Job summary

American Express in the UK is seeking a Manager, Technology Risk, to establish the second line of defense for Technology Risk and strengthen governance across UK businesses. You will identify, assess, measure, manage and report risk, working closely with regulators and senior stakeholders.

The role requires leadership of a team, deep understanding of the UK/EU regulatory landscape for technology and data risks, and the ability to drive risk-informed decisions in a fast-paced environment.

Qualifications

• 5+ years of leadership experience in risk management or a similar role.
• Experience interacting with regulators and familiarity with UK regulatory landscape and requirements.
• Strong understanding of UK/EU regulatory landscape for technology, data, cybersecurity, resilience, and AI risks; knowledge of FCA/PRA, DORA, GDPR, AI Act, CAF and UK data protection.

Responsibilities

• Establish the second line of defense framework for Technology Risk in the UK.
• Identify, assess, measure, manage and report risk across UK processes.
• Strengthen governance structures and challenge, and communicate oversight findings to senior leaders.
• Lead and develop a high-performing team and manage multiple priorities under pressure.

Skills

Leadership

Risk management

Regulatory knowledge

Stakeholder management

Communication

Risk assessment

Governance

Pressure management

Education

Advanced degree preferred

Industry certifications preferred

Tools

Archer

ServiceNow

Job description

The Global Risk & Compliance (GRC) organization serves as American Express’ independent risk management function. GRC maintains the enterprise risk framework, provides oversight and challenge, and monitors key risks. By embedding risk discipline into strategy and operations, GRC enables responsible growth, innovation, and long-term value creation while protecting customers and shareholders.

The UK Chief Risk Officer (CRO) organization within Global Risk and Compliance (GRC) is responsible for identifying and managing risk across all processes at American Express in the UK.

The Manager, Technology Risk, Enterprise Risk Management UK, within the GRC organization, is responsible for establishing the second line of defense framework for the Technology Risk areas under their responsibility for the UK market. We are seeking an experienced risk manager to be a part of this exciting journey. The incumbent will identify, assess, measure, manage and report risk and strengthen the governance structure for our UK businesses.

Minimum Qualifications:

• - 5+ years of leadership experience in risk management or a similar role;
• - Strong business acumen with a risk-reward control perspective;
• - Experience in interacting with regulators and familiarity with the UK regulatory landscape and requirements;
• - Working understanding of the UK and EU regulatory landscape applicable to technology, data, cybersecurity, resilience, and AI risks, including FCA/PRA supervisory expectations, DORA, GDPR, EU Artificial Intelligence Act and the UK Government's AI Regulation Framework, NCSC CAF, as well as UK and EU data protection requirements
• - Understanding risk assessment methodologies, frameworks, and industry standards.
• - Experience with Governance, Risk and Compliance tools (e.g. Archer / ServiceNow)
• - Demonstrated ability to successfully manage multiple priorities under pressure;
• - Fluency in English (verbal and written);
• - Advanced degree in business, economics, engineering, or a related field is preferred.
• - Having industry certifications in cybersecurity, operational resilience, business continuity management, Disaster Recovery or AI risk management is preferred.

Leadership Skills:

• - Proven leader who can build, inspire, and coach a team with a passion for the business;
• - Excellent relationship and influence management skills with the ability to build productive relationships across teams and levels of seniority;
• - Self-confident with a strong sense of integrity and the ability and willingness to challenge and be challenged;
• - Proactive in identifying issues, delivering and escalating key findings, and advising on recommended solutions to correct issues or mitigate risks;
• - Ability to communicate oversight findings to colleagues, business partners, and senior leaders;
• - Strong verbal and written communication skills.

Depending on factors such as business unit requirements, the nature of the position, cost and applicable laws, American Express may provide visa sponsorship for certain positions.