Associate-Technology Risk & Control

You Lead the Way. We’ve Got Your Back.

With the right backing, people and businesses have the power to progress in incredible ways. When you join Team Amex, you become part of a global and diverse community of colleagues with an unwavering commitment to back our customers, communities and each other. Here, you’ll learn and grow as we help you create a career journey that’s unique and meaningful to you with benefits, programs, and flexibility that support you personally and professionally.

At American Express, you’ll be recognized for your contributions, leadership, and impact - every colleague has the opportunity to share in the company’s success. Together, we’ll win as a team, striving to uphold our company values and powerful backing promises to provide the world’s best customer experience every day. And we’ll do it with the utmost integrity, and in an environment where everyone is seen, heard and feels like they belong.

Join Team Amex and let's lead the way together.

How will you make an impact in this role?

The Global Risk & Compliance (GRC) organization serves as American Express’ independent risk management function. GRC maintains the enterprise risk framework, provides oversight and challenge, and monitors key risks. By embedding risk discipline into strategy and operations, GRC enables responsible growth, innovation, and long-term value creation while protecting customers and shareholders.

The Technical Risk Management (TRM) team safeguards the enterprise, globally, by identifying, assessing, monitoring & reporting risks across Information & Cyber Security Risk, Technology Risk, Data Risk, Resiliency Risk, and AI Risk.

Cybersecurity Risk Management (CRM) is a part of TRM and is responsible for the independent cybersecurity risk management across applications and infrastructure at American Express.

CRM is hiring for an Associate who will support CRM in leading the governance, strategy and risk management for cybersecurity risks across American Express. This Associate will also assist with supporting cybersecurity committees and other forums. This Associate will report to the Cybersecurity Risk Management Manager and be part of the team that will manage cybersecurity risk frameworks and support core cyber domains, such as Third-party Security Management, Risk Exception/ Treatment and Cyber Resilience.

- Support the risk management oversight of Cybersecurity risk across core disciplines by leveraging technical expertise and AI, automation, and analytics.