Manager : Business Disruption & Operational Resilience Risk Management

Risk Management Opportunity At American Express

At American Express, our culture is built on a 175-year history of innovation, shared values and leadership behaviors, and an unwavering commitment to back our customers, communities, and colleagues. As part of Team Amex, you'll experience this powerful backing with comprehensive support for your holistic well-being and many opportunities to learn new skills, develop as a leader, and grow your career. Here, your voice and ideas matter, your work makes an impact, and together, you will help us define the future of American Express.

The Technical Risk Management (TRM) team, within the Global Risk and Compliance organization and led by the Chief Risk Officer, manages operational risks associated with Information & Cyber Security Risk, Business Disruption, Technology Risk, Data Risk, and AI Risk Management. The team also ensures that risk management activities are conducted in alignment with regulatory requirements and industry expectations. In addition, the team aggregates and reports on key risk management and oversight activities to the relevant management and Board risk committees.

This individual contributor role is a unique opportunity to join a high-impact team of diverse and talented professionals responsible for building the company's operational resilience risk oversight program. The program provides credible challenge and independent oversight of the first line risk taking activities, ensuring resilience is strengthened across the enterprise. Reporting to the Director for Business Disruption & Operational Resilience Risk Management, the Manager is responsible for independently assessing, monitoring, and reporting operational resilience risks and providing a view of aggregate risks. The risks identified by this team are reported to the Senior Management, Risk Management Committees, Board of Directors and Regulators, shaping key decisions at the highest level. This role requires close collaboration across lines of business and defense to ensure risks are managed effectively and efficiently in accordance with company policies and applicable regulatory requirements.

Essential job functions include :

• Conduct independent, proactive risk management and oversight of operational resilience related risks (including people, process, technology, third party, and infrastructure).
• Enhance and maintain the firm's operational resilience framework (policies, governance, minimum standards) to strengthen readiness and response to business disruption events.
• Demonstrate curiosity and deep engagement in resilience and continuity processes, delivering effective credible challenge.
• Partner with internal stakeholders to prevent, protect, respond and adopt / learn from disruptive events.
• Monitor resilience events, oversee data collection, and perform trend analysis to identify emerging risks and drive remediation.
• Develop and enhance data-driven key risk indicators and key performance indicators that provide real time and meaningful insights into the risk and performance trends.
• Support the design of operational resilience independent risk oversight program which defines the engagement and integration with various risk management programs, including Risk and Control Self Assessments, Operational Risk Management, etc.
• Support compliance with resilience-related regulations and standards (e.g., OCC Bulletin 2020-94, FFIEC Handbooks, GLBA, etc.) to meet legal and regulatory obligations.
• Help embed a strong risk-aware culture, encouraging proactive risk management behaviors within the organization.

Required qualifications include :

Preferred qualifications include :

Salary Range : $80,000.00 to $155,000.00 annually bonus benefits.