Senior Analyst-Control Management

The U.S. Consumer Services Team is responsible for our suite of consumer products, services, and experiences in the U.S., including our premium, cobrand, cash back, and lending portfolios, Membership Rewards, Global Travel & Lifestyle Services, the Centurion Lounge network, our Global Dining and Resy businesses, U.S. Consumer Banking, and best-in-class marketing programs across customer, prospect, and partner channels. The USCS team is focused on making membership an indisputable competitive advantage and helping each other become better leaders every day.

The objective of the USCS Control Management Risk ID & Assessment team is to identify risks throughout business processes, systems, and platforms, develop and recommend risk mitigation strategies to address these risks, and proactively flag high risk themes for intervention and control enhancement.

USCS is looking for a Sr. Analyst of Risk ID & Assessment focused on ensuring control management is embedded in the day-to-day operations of our organization. It will involve extensive collaboration with multiple partners across numerous business units and functional areas.

This role will support Digital Labs initiatives, which focus on early-stage digital innovation, emerging technology, and customer experience capabilities. This includes providing risk management support for projects in emerging risk areas such as AI-enabled experiences, Web3, digital wallet and payment integrations, personalization capabilities, and other new digital product concepts from ideation through launch readiness.

The Sr. Analyst, US Consumer Services Risk ID & Assessment:

• Assist in additional identification of risks throughout business processes and systems (along with business process owners)
• Facilitate Business Units in their risk assessments performance (e.g., Process Self Risk Assessments (PRSAs)) in addition to further assessments and testing / QA programs to ensure regulatory and internal standards are met (e.g., periodic PRSA reviews and update assessment criteria to align with regulatory updates)
• Support control monitoring (supplemental to BU process owners testing) and compile key operational risk trends, activities, and events
• Proactively help identify areas of high-risk for intervention (e.g., automated alerts generated for high-risk areas signal need for intervention and focus), including conducting independent quality assurance and vertical process testing
• Support thematic risk reporting (levels, trends, causes)
• Categorize controls and map against risks and processes (e.g., cross-BU process-control mapping)
• Support BU with identification of risks and spotting areas where product changes or improved controls may be required within New Product Governance (NPG)
• Support risk management practices within the business, including identifying, assessing, and managing risks associated with new digital capabilities, emerging technologies, and innovation-led projects
• Maintain risk dashboards and key risk indicators (KRIs) for ongoing monitoring
• Maintain risk profiles and an updated risk register(s)
• Support sharing insights, better practices, themes, etc. across the enterprise

Required Qualifications:

• 2+ Years experience in operational risk management (e.g., within Risk and/or Internal Audit function) Understanding of critical operational risk management lifecycle activities
• project management, communication, and interpersonal skills
• Experience in process governance, with an understanding of processes that align with policies, regulatory frameworks, and/or operational standards
• Sound analytical and problem-solving skills, with an ability to analyze data, identify trends, and evaluate risk scenarios effectively
• Experience in emerging digital capabilities and technology-enabled risk areas, including artificial intelligence, Web 3, digital payments, data-driven personalization, automation, third-party integrations, and new product innovation.
• Ability to quickly learn complex digital products, translate technical concepts into clear risk considerations, and partner with product, technology, privacy, legal, compliance, and control teams to support effective governance. Preferred Qualification
• Bachelor’s degree in finance, Business, Risk Mgmt., or related field; advanced degrees (e.g., MBA, MSc) or certifications are advantageous
• Supporting identification of operational risks throughout business processes and systems
• Facilitating risk assessment performance in addition to further assessments and testing programs to ensure regulatory and internal standards are met
• Supporting independent control monitoring, including identification of control improvements
• Supporting the identification of areas of risk for intervention, including conducting independent quality assurance and process testing
• Compiling thematic risk reporting to provide actionable insights on risk levels, emerging trends and root causes

Employment eligibility to work with American Express in the United States is required as the company will not pursue visa sponsorship for these positions.