VP, International Resilience Risk Management in London

The Global Risk & Compliance (GRC) organization serves as American Express’ independent risk management function. GRC maintains the enterprise risk framework, provides oversight and challenge, and monitors key risks. By embedding risk discipline into strategy and operations, GRC enables responsible growth, innovation, and long-term value creation while protecting customers and shareholders.

The Technical Risk Management (TRM) team safeguards the enterprise, globally, by identifying, assessing, monitoring & reporting risks across Information & Cyber Security Risk, Technology Risk, Data Risk, Resiliency Risk, and AI Risk.

The Resiliency Risk Management (RRM) organization within TRM provides independent second-line risk management oversight of resiliency risks across American Express globally. RRM is responsible for establishing and maintaining the enterprise resiliency risk management framework and providing independent oversight and credible challenge across the interconnected capabilities that enable American Express to prepare for, withstand, respond to and recover from operational disruptions. These capabilities include Business Resiliency, Technology and Cyber Resilience, Third-Party Risk, Site and Workforce Resiliency, Disaster Recovery and Crisis Management. RRM identifies, assesses, monitors and reports resiliency risk and partners across the enterprise to promote effective risk management, governance and adherence to applicable regulatory requirements and supervisory expectations.

Responsibilities:

• Lead independent second-line oversight of operational resilience risk across International businesses and Legal Entities, ensuring alignment with enterprise frameworks and standards while addressing applicable local regulatory requirements.
• Lead the international implementation and ongoing application of the enterprise resiliency risk management framework, providing effective oversight and credible challenge across Business Resiliency, Business Continuity Management, Disaster Recovery, Crisis Management, Technology and Cyber Resilience, Third-Party Risk, and Site and Workforce Resiliency.
• Establish and communicate a consolidated International resilience risk profile through the identification, assessment, monitoring and reporting of material risks, vulnerabilities, control weaknesses and emerging risk themes.
• Provide independent review and challenge of key operational resilience activities, including critical and important business service identification, dependency mapping, impact tolerances, scenario testing, controls and remediation.
• Partner with International Risk Officers, Legal Entity leadership and enterprise risk teams to translate enterprise requirements into effective local oversight while maintaining consistency across jurisdictions.
• Lead International resilience risk governance and reporting, including risk appetite, metrics, executive reporting and escalation of material risks to senior management and relevant governance committees.
• Lead and develop locally based International risk colleagues, providing functional direction and promoting consistent standards of risk oversight, credible challenge and escalation across markets.
• Monitor evolving global regulatory requirements and supervisory expectations, including DORA, PRA, OCC and FFIEC guidance, and lead or support resilience-related regulatory examinations, audits and supervisory engagements.
• Provide independent risk oversight during significant operational disruptions and partner across RRM, GRC, and the first line to identify lessons learned, strengthen resilience capabilities and promote a strong risk-management culture.

Qualifications:

• Experience within banking, payments or broader financial services, particularly within a large, internationally regulated organization; relevant experience in other highly regulated industries with directly transferable resilience expertise will also be considered.
• Experience within a second-line-of-defense risk management function, with demonstrated responsibility for independent risk oversight, credible challenge, risk assessment and escalation.
• Experience leading resilience risk oversight across multiple countries or Legal Entities, including critical business services, dependency mapping, impact tolerances, scenario testing and remediation.
• Experience overseeing significant operational disruptions, technology outages, cyber events or other resilience events.
• Relevant professional certifications in Operational Resilience, Business Continuity Management, Disaster Recovery, Risk Management, Technology Risk or Cybersecurity.
• Advanced degree in business, risk management, technology, engineering or a related discipline is preferred.

Employment eligibility to work with American Express in the UK is required as the company will not pursue visa sponsorship for these positions.

At American Express, our culture is built on a 175-year history of innovation, shared values and Leadership Behaviors, and an unwavering commitment to back our customers, communities, and colleagues. From delivering differentiated products to providing world-class customer service, we operate with a strong risk mindset, ensuring we continue to uphold our brand promise of trust, security, and service.

As part of Team Amex, you’ll experience our powerful backing with comprehensive support for your holistic well-being and many opportunities to learn new skills, develop as a leader, and grow your career. Here, your voice and ideas matter, your work makes an impact, and together, you will help us define the future of American Express.