UK Technology Risk Lead, GRC – Second Line

American Express; Greater London; On-site; GBP 90,000 - 130,000; Full time

Job summary

American Express in the UK is seeking a Manager, Technology Risk, to establish the second line of defense for Technology Risk and strengthen governance across UK businesses. You will identify, assess, measure, manage and report risk, working closely with regulators and senior stakeholders.

The role requires leadership of a team, deep understanding of the UK/EU regulatory landscape for technology and data risks, and the ability to drive risk-informed decisions in a fast-paced environment.

Qualifications

• 5+ years of leadership experience in risk management or a similar role.
• Experience interacting with regulators and familiarity with UK regulatory landscape and requirements.
• Strong understanding of UK/EU regulatory landscape for technology, data, cybersecurity, resilience, and AI risks; knowledge of FCA/PRA, DORA, GDPR, AI Act, CAF and UK data protection.

Responsibilities

• Establish the second line of defense framework for Technology Risk in the UK.
• Identify, assess, measure, manage and report risk across UK processes.
• Strengthen governance structures and challenge, and communicate oversight findings to senior leaders.
• Lead and develop a high-performing team and manage multiple priorities under pressure.

Skills

Leadership

Risk management

Regulatory knowledge

Stakeholder management

Communication

Risk assessment

Governance

Pressure management

Education

Advanced degree preferred

Industry certifications preferred

Tools

Archer

ServiceNow

Job description

American Express in the UK is seeking a Manager, Technology Risk, to establish the second line of defense for Technology Risk and strengthen governance across UK businesses. You will identify, assess, measure, manage and report risk, working closely with regulators and senior stakeholders.

The role requires leadership of a team, deep understanding of the UK/EU regulatory landscape for technology and data risks, and the ability to drive risk-informed decisions in a fast-paced environment.