Senior UK Technology Risk Manager (2nd Line)

American Express; Greater London; Hybrid; GBP 90,000 - 130,000; Full time

Benefits offered by this job

Bonus incentives

Medical, dental, vision benefits

Flexible working model

Parental leave

Job summary

American Express is seeking an experienced Manager, Technology Risk, to establish and lead the 2nd line of defense for Technology Risk across UK LE entities. You will identify, assess, measure, and report risk, strengthening governance and oversight with regulators and leadership.

The role requires coordinating across 2LOD teams, developing risk metrics, and ensuring UK regulatory alignment, including DORA, GDPR and AI risk controls.

Qualifications

• 5+ years of leadership in risk management or similar role.
• Strong business acumen with risk-reward control perspective.
• Experience interacting with regulators and familiarity with UK regulatory landscape.
• Working knowledge of UK/EU regulatory landscape for technology, data, cybersecurity, resilience, and AI risks; FCA/PRA, DORA, GDPR, AI Act, UK AI Regulation framework, NCSC CAF.
• Understanding risk assessment methodologies, frameworks, and standards.
• Experience with Governance, Risk and Compliance tools (e.g. Archer / ServiceNow).
• Fluency in English (verbal and written).
• Advanced degree preferred; industry certifications in cybersecurity, resilience, business continuity, DR, or AI risk management preferred.

Responsibilities

• Own and refine the 2nd Line of Defense framework for UK Technology Risk.
• Collaborate with 2LOD teams to coordinate challenge to 1LOD teams.
• Act as main Technology Risk contact for LE regulator, Audit and LE Leadership.
• Represent Technology Risk at LE board meetings as needed.
• Contribute to ILE Technology Risk policies to meet UK requirements.
• Influence Enterprise Tech Risk frameworks to fit ILE needs.
• Advise business on applicability and execution of Tech Risk frameworks.
• Coordinate 2nd Line testing, risk assessments and risk appetite reviews.
• Communicate risks between ILE and Enterprise clearly.
• Support ILE CRO oversight and remediation of Tech Risks.
• Oversee 2nd Line for Regulatory Change Management in Tech Risk.
• Develop LE metrics dashboard aligned with regulatory requirements.
• Review IT/IS/Data/AI risk questionnaires for regulators.
• Participate in resilience incident communications and potential regulatory notifications.

Skills

Leadership

Regulatory experience

Stakeholder management

English fluency

Education

Advanced degree in business/economics/engineering

Tools

Archer

ServiceNow

Job description

American Express is seeking an experienced Manager, Technology Risk, to establish and lead the 2nd line of defense for Technology Risk across UK LE entities. You will identify, assess, measure, and report risk, strengthening governance and oversight with regulators and leadership.

The role requires coordinating across 2LOD teams, developing risk metrics, and ensuring UK regulatory alignment, including DORA, GDPR and AI risk controls.