Software engineer
- Location
- San Francisco
- Type
- Full time
- Compensation
- $150k-$200k
- Posted
- 2 days ago
Join a team building useful software. Work closely with engineering and design to turn new ideas into products.
Find roles through people you trust, and message a verified founder or page admin about your interest.
The Global Risk & Compliance (GRC) organization serves as American Express’ independent risk management function. GRC maintains the enterprise risk framework, provides oversight and challenge, and monitors key risks. By embedding risk discipline into strategy and operations, GRC enables responsible growth, innovation, and long-term value creation while protecting customers and shareholders.
The Italy CRO function is part of the Int’l CRO team, within Global Risk and Compliance (GRC). It is responsible for identifying and overseeing risk across all processes.
How will you make an impact in this role?
The Analyst, Italy Chief Risk Officer, Testing & Monitoring, within the GRC organization, is responsible for supporting the establishment and enhancement of second-line assurance and testing capabilities.
Minimum Qualifications
People Skills:
Required Experience
Preferred Experience
Applicable National Collective Bargaining Agreement: Terziario, Distribuzione e Servizi
Salary Range: €40.000 to €60.000 annually + bonus + benefits
The advertised salary range is based on full-time employment and will be prorated for part-time roles.
Non-considerations for sponsorship:
Employment eligibility to work with American Express in Italy is required as the company will not pursue visa sponsorship for these positions.
Key Responsibilities:
Maintain the annual risk assessment for the market's legal entities.
Develop a multi-year testing plan based on the risk assessment, covering all Group risk pillars (Credit, Operational, Compliance, etc.).
Prioritise testing activity using risk-based methodologies.
Align testing activity with enterprise risk assessments.
Support team in performing the planned second-line control reviews and preparing testing reports. You will communicate review outcomes to senior management and the relevant governance committees.
Define, together with the team, a remediation monitoring program for issues identified during control reviews and oversee the implementation of corrective actions.
Continuously enhance the tools, metrics, and reporting mechanisms used to inform senior management, ensuring that both emerging and existing risks are appropriately identified and managed.
Testing Framework Development by developing second-line testing methodologies, designing supporting policies, standards and procedures, establishing testing governance and quality standards and understanding current practice in testing processes in ILEs and driving ongoing improvement efforts toward implementing consistent best practice.
Integrated Assurance by coordinating assurance activities across first, second and third lines of defence, reducing duplication of testing activities, improving assurance coverage and effectiveness and developing integrated assurance frameworks and assurance maps.
Enterprise Testing Coordination by working with enterprise testing and assurance teams, aligning methodologies and reporting approaches and identifying opportunities for efficiency and consistency.
Reporting and Remediation by developing testing reporting frameworks, reporting findings to management and committees, tracking remediation activities and identifying thematic risks and control weaknesses.