Head of Risk Management & Audit

The objective of the GRC Control Management RCSA team is to drive the consistent and timely execution of the Risk and Control Self-Assessment (RCSA) program, partnering with business leaders to identify, assess, and monitor operational risks, evaluate control effectiveness, and promote a strong risk and control environment.
GRC Control Management team is looking for a Manager of RCSA responsible for overseeing the execution, quality, and governance of the RCSA program. This role will partner with business, risk, compliance, and control management stakeholders to ensure risk assessments are completed consistently, key risks are appropriately identified and evaluated, and control effectiveness is challenged and documented in accordance with enterprise standards.
Lead and coordinate end-to-end execution of the RCSA program across assigned RAUs, ensuring adherence to enterprise standards, timelines, and quality expectations.
Facilitate risk identification and assessment discussions with business stakeholders to ensure material risks and key controls are appropriately documented.
Challenge and review risk and control assessments for completeness, accuracy, and consistency with established methodology.
Perform quality assurance reviews of RCSA documentation, including risk statements, control inventories, control assessments, and supporting evidence.
Drive completion of RCSA milestones and deliverables, escalating risks, issues, and execution challenges as appropriate.
Analyze RCSA outputs, issues, events, and control performance trends to identify emerging risks, thematic concerns, and opportunities for control enhancement.
Partner with business, compliance, audit, and ORM stakeholders to resolve assessment gaps and ensure sustainable remediation of identified control weaknesses.
Prepare and present RCSA status updates, key observations, and risk themes to senior management and governance forums.
Support continuous improvement initiatives to enhance RCSA effectiveness, consistency, reporting, and stakeholder engagement.
4+ Years experience in operational risk management (e.g., within Risk and/or Internal Audit function). Understanding of critical operational risk management lifecycle activities

• Demonstrated experience leading or executing Risk and Control Self-Assessments (RCSAs), risk assessments, control evaluations, or similar governance programs.
• Strong understanding of operational risk management frameworks, control design, control effectiveness assessment, and issue management practices.
• Proven ability to manage multiple deliverables, stakeholders, and competing priorities within structured governance environments.
• Excellent written and verbal communication skills, including experience presenting risk-related matters to senior leadership.
• Strong analytical, problem-solving, and critical-thinking capabilities with the ability to challenge risk assessments and identify control gaps.
• Bachelor's Degree in Finance, Business, Risk Mgmt., or related field; MBA, MSc) or certifications are advantageous
• Facilitating RCSA workshops, risk identification sessions, and control assessment reviews.
• Interpreting and applying operational risk, compliance, or regulatory requirements within a large financial institution.
• Partnering with first-line business teams to drive accountability for risk ownership and control effectiveness.

At American Express, our culture is built on a 175-year history of innovation, shared values and Leadership Behaviors, and an unwavering commitment to back our customers, communities, and colleagues. From delivering differentiated products to providing world-class customer service, we operate with a strong risk mindset, ensuring we continue to uphold our brand promise of trust, security, and service.
Here, your voice and ideas matter, your work makes an impact, and together, you will help us define the future of American Express.
This means caring for you and your loved ones' physical, financial, and mental health, as well as providing the flexibility you need to thrive personally and professionally:

• Bonus incentives
• 6% Company Match on retirement savings plan
• Free financial coaching and financial well-being support
• Comprehensive medical, dental, vision, life insurance, and disability benefits
• Flexible working model with hybrid, onsite or virtual arrangements depending on role and business need
• Free access to global on-site wellness centers staffed with nurses and doctors (depending on location)
• Free and confidential counseling support through our Healthy Minds program
• Career development and training opportunities

For a full list of Team Amex benefits, visit our Colleague Benefits Site .
American Express is an equal opportunity employer and makes employment decisions without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran status, disability status, age, or any other status protected by law. American Express will consider for employment all qualified applicants, including those with arrest or conviction records, in accordance with the requirements of applicable state and local laws, including the California Fair Chance Act, the Los Angeles County Fair Chance Ordinance for Employers, and the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance. For positions covered by federal and/or state banking regulations, American Express will comply with such regulations as it relates to the consideration of applicants with criminal convictions.
That's why we have Amex Flex, our enterprise working model that provides greater flexibility to colleagues while ensuring we preserve the important aspects of our unique in-person culture. Depending on role and business needs, colleagues will either work onsite, in a hybrid model (combination of in-office and virtual days) or fully virtually.
If the link does not work, you may access the poster by copying and pasting the following URL in a new browser window: