Senior Manager, UK Chief Risk Officer, Technology Risk

The Global Risk & Compliance (GRC) organization serves as American Express’ independent risk management function. GRC maintains the enterprise risk framework, provides oversight and challenge, and monitors key risks. By embedding risk discipline into strategy and operations, GRC enables responsible growth, innovation, and long-term value creation while protecting customers and shareholders.

The UK Chief Risk Officer (CRO) organization within Global Risk and Compliance (GRC) is responsible for identifying and managing risk across all processes at American Express in the UK.

The Manager, Technology Risk, Enterprise Risk Management UK, within the GRC organization, is responsible for establishing the second line of defense framework for the Technology Risk areas under their responsibility for the UK market. We are seeking an experienced risk manager to be a part of this exciting journey. The incumbent will identify, assess, measure, manage and report risk and strengthen the governance structure for our UK businesses.

Minimum Qualifications:

- 5+ years of leadership experience in risk management or a similar role;
- Strong business acumen with a risk-reward control perspective;
- Experience in interacting with regulators and familiarity with the UK regulatory landscape and requirements;
- Working understanding of the UK and EU regulatory landscape applicable to technology, data, cybersecurity, resilience, and AI risks, including FCA/PRA supervisory expectations, DORA, GDPR, EU Artificial Intelligence Act and the UK Government's AI Regulation Framework, NCSC CAF, as well as UK and EU data protection requirements
- Understanding risk assessment methodologies, frameworks, and industry standards.
- Experience with Governance, Risk and Compliance tools (e.g. Archer / ServiceNow)
- Demonstrated ability to successfully manage multiple priorities under pressure;
- Fluency in English (verbal and written);
- Advanced degree in business, economics, engineering, or a related field is preferred.
- Having industry certifications in cybersecurity, operational resilience, business continuity management, Disaster Recovery or AI risk management is preferred.

Leadership Skills:

- Proven leader who can build, inspire, and coach a team with a passion for the business;
- Excellent relationship and influence management skills with the ability to build productive relationships across teams and levels of seniority;
- Self-confident with a strong sense of integrity and the ability and willingness to challenge and be challenged;
- Proactive in identifying issues, delivering and escalating key findings, and advising on recommended solutions to correct issues or mitigate risks;
- Ability to communicate oversight findings to colleagues, business partners, and senior leaders;
- Strong verbal and written communication skills.

Depending on factors such as business unit requirements, the nature of the position, cost and applicable laws, American Express may provide visa sponsorship for certain positions.