The Global Risk & Compliance (GRC) organization serves as American Express’ independent risk management function. GRC maintains the enterprise risk framework, provides oversight and challenge, and monitors key risks. By embedding risk discipline into strategy and operations, GRC enables responsible growth, innovation, and long-term value creation while protecting customers and shareholders.

The UK CRO function is part of the Int’l CRO team, within Global Risk and Compliance (GRC). It is responsible for identifying and overseeing risk across all processes. 

The Analyst, Operational Risk, UK Chief Risk Officer, Ops Risk, within the GRC organization, is responsible for supporting the establishment of the second line of defense framework for the areas under their responsibility for the UK market.   The incumbent will identify, assess, measure, manage and report risk and strengthen the governance structure for our UK businesses.

• 3-5 years of experience in risk management or a similar role;
• Strong business acumen with a risk-reward control perspective;
• Experience in interacting with regulators and familiarity with UK’s regulatory landscape and requirements;
• Demonstrated ability to successfully manage multiple priorities under pressure;
• Fluency in English (verbal and written);
• Advanced degree in business, economics, engineering, or a related field is preferred.

 

People Skills:

• Excellent relationship and influencing skills with the ability to build productive relationships across teams and levels of seniority;
• Self-confident with a strong sense of integrity and the ability and willingness to challenge and be challenged;
• Proactive in identifying issues, delivering and escalating key findings, and advising on recommended solutions to correct issues or mitigate risks;
• Ability to communicate oversight findings to colleagues, business partners, and senior leaders;
• Strong verbal and written communication skills.

 

Employment eligibility to work with American Express in the UK is required as the company will not pursue visa sponsorship for these positions.  

• Participate in the Risk Appetite Framework (RAF) refresh process and seek to align International Legal Entities (ILE) Ops Risk metrics with Enterprise (as far as possible)
• Provide Ops Risk  credible challenge to Legal Entity (LE) projects, strategies and in the Change Advisory Forums. 
• Understand and speak to the Ops Risk profile of the LE based on aggregation of data and reporting
• Act as the point of contact for Ops Risk for regulators, Audit and local Leadership, and requests for Ops Risk program/results requests
• LE specific committee Ops Risk representative, and point of contact for Ops Risk at LE board meetings (as required) 
• Own ILE Ops Risk policies and frameworks, where required
• Influence Enterprise Ops Risk Framework/Policies/Programs to ensure they are fit for purpose for ILE, and support ILE deployment of Enterprise Ops Risk programs 
• Advise the business on applicability and effective execution of Ops Risk frameworks 
• Coordinate with Enterprise Risk Lead on 2nd Line testing, and/or support ILE Risk Type testing & provide output of ILE testing to Enterprise for awareness and risk aggregation
• Ensure appropriate communication of risks between the ILE and Enterprise 
• Support the ILE Chief Risk Officer (CRO) in their oversight duties aligned to the Risk Governance Framework and applicable policies
• Review issues and findings related to risk type impacting ILE, and oversee effective remediation 
• 2nd Line of Defense ILE oversight lead for Regulatory Change Managements relating to Ops Risk. 
• Work with the Enterprise team to develop the LE metrics dashboard, including RAF metrics, aligned with applicable regulations
• With the reporting team, produce an LE Operational Risk Management dashboard including events, issues etc. to analyse the operational risk profile