Senior Information Security Analyst — Risk & Compliance Lead

American Express; Richmond (VA); Remote; USD 45,000 - 60,000; Full time

Job summary

American Express in Richmond, VA seeks a Senior Information Security Analyst to support the GI Risk The Board management program, ensuring alignment with banking rules and internal policies. You will coordinate risk assessments, oversight, and incident responses with multiple lines of defense.

The role emphasizes proactive risk mitigation, maintaining documentation, and collaborating with Internal Audit, regulators, and GI groups to implement controls that strengthen information security across

Qualifications

• Graduate degree required.
• Experience with IT risk and regulatory compliance.
• Strong ability to translate complex data into clear communications.
• Ability to collaborate with governance and audit groups.

Responsibilities

• Ensure GI Board/Management program compliance with regulations and internal policies.
• Support risk assessments and mitigation plans across development and operations.
• Assess control designs and endorse changes to strengthen risk posture.
• Provide guidance on project status, workload, and decision-making for testing efforts.
• Maintain GI risk documentation and enable timely updates.
• Collaborate with GI groups to advance risk management practices.

Skills

Information security

Risk management

Regulatory compliance

Governance

Analytical thinking

Communication

Stakeholder management

Problem solving

ITIL/COBIT knowledge

Documentation

Education

Graduate degree

Job description

American Express in Richmond, VA seeks a Senior Information Security Analyst to support the GI Risk The Board management program, ensuring alignment with banking rules and internal policies. You will coordinate risk assessments, oversight, and incident responses with multiple lines of defense.

The role emphasizes proactive risk mitigation, maintaining documentation, and collaborating with Internal Audit, regulators, and GI groups to implement controls that strengthen information security across