Manager-Ops Risk Management

The objective of the GRC Control Management RCSA team is to drive the consistent and timely execution of the Risk and Control Self-Assessment (RCSA) program, partnering with business leaders to identify, assess, and monitor operational risks, evaluate control effectiveness, and promote a strong risk and control environment.

GRC Control Management team is looking for a Manager of RCSA responsible for overseeing the execution, quality, and governance of the RCSA program. This role will partner with business, risk, compliance, and control management stakeholders to ensure risk assessments are completed consistently, key risks are appropriately identified and evaluated, and control effectiveness is challenged and documented in accordance with enterprise standards.

• Lead and coordinate end-to-end execution of the RCSA program across assigned RAUs, ensuring adherence to enterprise standards, timelines, and quality expectations.
• Facilitate risk identification and assessment discussions with business stakeholders to ensure material risks and key controls are appropriately documented.
• Challenge and review risk and control assessments for completeness, accuracy, and consistency with established methodology.
• Perform quality assurance reviews of RCSA documentation, including risk statements, control inventories, control assessments, and supporting evidence.
• Drive completion of RCSA milestones and deliverables, escalating risks, issues, and execution challenges as appropriate.
• Analyze RCSA outputs, issues, events, and control performance trends to identify emerging risks, thematic concerns, and opportunities for control enhancement.
• Partner with business, compliance, audit, and ORM stakeholders to resolve assessment gaps and ensure sustainable remediation of identified control weaknesses.
• Prepare and present RCSA status updates, key observations, and risk themes to senior management and governance forums.
• Support continuous improvement initiatives to enhance RCSA effectiveness, consistency, reporting, and stakeholder engagement.

Required Qualifications:

• 4+ Years experience in operational risk management (e.g., within Risk and/or Internal Audit function). Understanding of critical operational risk management lifecycle activities
• Demonstrated experience leading or executing Risk and Control Self-Assessments (RCSAs), risk assessments, control evaluations, or similar governance programs.
• Strong understanding of operational risk management frameworks, control design, control effectiveness assessment, and issue management practices.
• Proven ability to manage multiple deliverables, stakeholders, and competing priorities within structured governance environments.
• Excellent written and verbal communication skills, including experience presenting risk-related matters to senior leadership.
• Strong analytical, problem-solving, and critical-thinking capabilities with the ability to challenge risk assessments and identify control gaps.

Preferred Qualifications:

• Bachelor's Degree in Finance, Business, Risk Mgmt., or related field; advanced degrees (e.g., MBA, MSc) or certifications are advantageous
• Experience in at least one of the following:
  • Facilitating RCSA workshops, risk identification sessions, and control assessment reviews.
  • Interpreting and applying operational risk, compliance, or regulatory requirements within a large financial institution.
  • Experience in the financial industry
  • Partnering with first-line business teams to drive accountability for risk ownership and control effectiveness.

Employment eligibility to work with American Express in the United States is required as the company will not pursue visa sponsorship for these positions.