Information Security Manager

You Lead the Way. We’ve Got Your Back.

With the right backing, people and businesses have the power to progress in incredible ways. When you join Team Amex, you become part of a global and diverse community of colleagues with an unwavering commitment to back our customers, communities and each other. Here, you’ll learn and grow as we help you create a career journey that’s unique and meaningful to you with benefits, programs, and flexibility that support you personally and professionally.

At American Express, you’ll be recognized for your contributions, leadership, and impact—every colleague has the opportunity to share in the company’s success. Together, we’ll win as a team, striving to uphold our company values and powerful backing promise to provide the world’s best customer experience every day. And we’ll do it with the utmost integrity, and in an environment where everyone is seen, heard and feels like they belong.

Join Team Amex and let\’s lead the way together.

As part of our diverse tech team, you can partner with technology and business partners across business functions/processes to ensure alignment, understanding and ongoing communication on risk controls and regulatory/compliance requirements. Works individually and with teams on both structured and unstructured assignments. And because we understand the importance of keeping your skills fresh and relevant, we give you dedicated time to invest in your professional development. Find your place in technology on #TeamAmex.

How will you make an impact in this role?

As an Information Security Manager in our Mission Control Governance & Service Control organization, you will be essential in providing enterprise services to ensure high levels of product availability for the customers and partners of American Express. This role ensures that technology resilience service is delivered effectively and that identified actions to maintain or improve levels of service are implemented. The Information Security Manager will perform proactive assessments on all functions within Mission Control to ensure that any gaps are identified and remediated. Partnering with Information Security, Infrastructure teams, Business Continuity Management, Crisis Management and Cyber Risk Management, this role will be instrumental in sharing relevant projects and activities to bolster Operational Resilience posture and the Mission Control vision.

Responsibilities

• Develop and manage Operational Resilience governance reporting and metrics for Technology.
• Inspire teams to have a “resilience-first” mindset and set strategies to ensure that Technology Resilience is best-in-class.
• Support the development and maintenance of the Mission Control Governance Framework, including policies, procedures, and standards.
• Central point of contact for vendor DR Plan and Exercise reviews.
• Perform self-assessments against current and emerging regulations to ensure compliance.
• Create training programs for Mission Control and partners.
• Implement projects that improve the risk posture of Mission Control.
• Gather, summarize, and present key data utilizing dashboards and reporting through analytic tools.
• Partner with operational resilience co-ordination teams in international markets to ensure consistent implementation of operational resilience framework.
• Known as the expert of relevant operational and technology related regulations, with a focus on Disaster Recovery and Operational Resilience.
• Ensure that Mission Control policies, standards and procedures are updated according to the uplift plan.
• Review and enhance risk related activities including controls, testing, and identify areas of improvement.
• Supports the analysis of underlying trends and action plans associated with information security, disaster recovery and other domains.
• Gather, summarize, and present key data utilizing dashboards and reporting.
• Strong analytical abilities and attention to detail.
• Ability to create comprehensive reporting and dashboards that summarize large amounts of complex data and present the findings clearly.
• Ensures integration of projects and adjusts project scope, timing, and budgets as needed, based on objectives.
• Identifies and tracks key achievements and recommend adjustments to cross-functional team plans.
• Ensures accurate reflection of project/program budgets, forecasts, and actuals with related tools.
• Communicates with key partners regarding program strategy/plan direction and changes.

Minimum Qualifications

The successful candidate for this position must be a proven self-starter with the ability to manage multiple priorities for various stakeholders. In addition, the candidate must possess the following qualifications:

• Bachelor’s Degree or equivalent experience in related field.
• Minimum five years of experience with global operational/technology regulations, preferably in the financial services field. (e.g., FFIEC/FBA, RBI guidelines, DORA, UK FCA regulations).
• Ability to lead cross-functional, large/complex program or multiple programs.
• Ability to adapt to situations to quickly resolve issues and/or gain alignment.
• Ability to communicate with all leadership levels.
• Ability to use business and technical experience to identify impacts or risks and build plans to mitigate them.
• Strong knowledge of the inter-relationships between Technology Resilience, Enterprise Resilience, Technology Risk Management and Crisis Management.
• Experienced knowledge using the core tools used in the planning, analyzing, designing, building, testing, configuring and maintaining of assigned application(s).
• Technical Acumen, Adaptability, Collaboration & Teamwork.
• Continuous Improvement, Drive for Results and Analytical Thinking.
• Documentation & Technical Writing and Problem Solving.
• Excellent communication skills: Proficient in technical and business writing, able to produce written reports and templates, able to effectively present information based on audience seniority and level of formality.
• Self-motivated with an ability to work on one’s own with a strong sense of ownership and accountability.

Preferred Qualifications

• Experience with ITSM, Incident Management, Business Continuity/Disaster Recovery.
• Experience in Governance.
• In depth knowledge of Business Continuity Management practices.
• Experience with relevant business domain related functions.

#J-18808-Ljbffr