Manager-Control Management

The objective of the Finance Control Management Risk ID, Assessment, and Testing team is to identify, assess, mitigate, and report on Operational Risk within Finance processes to ensure adherence to regulatory standards, Amex policy and enhance Finance’s resilience through managing a clear methodology of inherent and residual risk.

Finance is looking for a Manager of Risk ID, Assessment, and Testing focused on ensuring control management is embedded in the day-to-day operations of our organization. It will involve extensive collaboration with multiple partners across numerous business units, functional areas, and geographies.

- Provide additional identification of risks throughout Finance processes and systems (along with Finance process owners)

- Facilitate Finance in their risk assessments (e.g., Process Self Risk Assessments (PRSAs)) in addition to further assessments and testing / QA programs to ensure regulatory and internal standards are met (e.g., periodic PRSA reviews and update assessment criteria to align with regulatory updates)

- Conduct control monitoring (supplemental to Finance process owners testing) and compile key operational risk trends, activities, and events

- Proactively help identify areas of high-risk for intervention (e.g., automated alerts generated for high-risk areas signal need for intervention and focus), including conducting independent quality assurance and vertical process testing

- Compile thematic risk reporting (levels, trends, causes) to provide actionable insights for Finance on current risk levels, emerging trends and root causes

- Review categorization of controls and map against risks and processes (e.g., cross-Finance process-control mapping)

- Advise Finance with identification of risks and spotting areas where product changes or improved controls may be required within New Product Governance (NPG)

- Help drive Finance PRSA transformation efforts to support 2nd line changes

- Review risk dashboards and key risk indicators (KRIs) for ongoing monitoring

- Review risk profiles and an updated risk register(s)

- Support sharing insights, better practices, themes, etc. across the enterprise

- Facilitate, as appropriate, the components of the RCSA; Support and challenge the Process Owners to ensure Operational Risk related RCSA and control processes are being followed