Manager-Tech Risk & Control

At American Express, our culture is built on a 175-year history of innovation, shared Leadership Behaviors, and an unwavering commitment to back our customers, communities, and colleagues. As part of Team Amex, you'll experience this powerful backing with comprehensive support for your well-being and many opportunities to learn, develop as a leader, and grow your career.

Here, your voice and ideas matter, your work makes an impact, and together, you will help us define the future of American Express.

How will you make an impact in this role?

The Regional Information Security Officer (RISO) organization is responsible for information security control enforcement, incident management, regulatory change, cybersecurity awareness, reporting, and enablement for American Express European legal entities.

Key Responsibilities Include:

• Supporting the connection between core enterprise technology risk and information security functions and American Express European legal entities.
• Delivering leadership reporting and risk metrics to demonstrate the effectiveness of the cybersecurity program.
• Supporting regulatory audits and examinations for Info Sec and Tech functions, collaborating with the Privacy Office, Compliance, General Counsel, CRO teams, and the broader Information Security organization.
• Assisting with regulatory change management, including DORA, Operational Resilience, and EU AI Act.
• Supporting cyber incident management processes.
• Assessing the design and operational effectiveness of information security controls to protect Confidentiality, Availability, and Integrity of Information and Systems.
• Consulting on EMEA Business & Technologies projects to ensure security measures are in place.
• Participating in the extended Information Security team to support security and compliance initiatives.

Maintaining EMEA reporting boundaries and overseeing relevant governance processes.

Minimum Qualifications:

• Excellent verbal and written communication skills, with the ability to translate technical concepts into clear business language.
• Proficiency in Italian and English.
• Ability to build relationships and collaborate in a complex matrix environment.
• Strong organization and planning skills.
• Ability to work independently within a geographically dispersed team.
• Knowledge of applicable information security standards and regulatory requirements.
• Keen attention to detail.
• 5+ years of experience in Information Security or Technology Risk Management.
• Experience working with audits and regulatory requirements in complex, regulated businesses.
• Broad understanding of information security disciplines.
• Experience in risk assessment and methodologies, including quantitative risk management techniques.
• Security-related certifications are desirable.

Non-considerations for sponsorship:

Employment eligibility to work with American Express in Italy is required, as the company will not pursue visa sponsorship for these positions.

Guardian Benefits:

We support your well-being with benefits that help you perform your best, including:

• Competitive base salaries
• Bonus incentives
• Support for financial well-being and retirement
• Comprehensive medical, dental, vision, life insurance, and disability benefits (depending on location)
• Flexible working arrangements (hybrid, onsite, virtual)
• Generous parental leave policies (location-dependent)
• Access to global wellness centers (location-dependent)
• Confidential counseling through Healthy Minds
• Career development and training opportunities

Employment is conditioned upon successful background verification, in accordance with applicable laws.

#J-18808-Ljbffr