Manager - Control Management

International Risk and Controls sits within International Card Services (ICS) which comprises of all the issuing & acquiring functions across all 28 international markets excluding the US - colleagues operate across a variety of geographies and disciplines. ICS issues products to our Consumer and Commercial customers – the organization is an integral part of the global growth strategy for American Express; offering differentiated products and services is critical to our success and promises to drive significant growth and value through the delivery of innovative products, tailored to the needs of our customers. Our organization helps our international businesses manage risk, respond to new regulation, and develop new products while creating and nurturing effective partnerships across multiple key stakeholders across the organisation.  

The objective of the ICS Control Management Legal Entity APAC Markets Team is to provide specialized and strategic operational risk advisory to the business on product and service areas to ensure an effective control environment exists that delivers on all operational risk obligations supporting the Legal Entity. The role will involve extensive collaboration with multiple partners across numerous business units, functional areas, and geographies.

ICS Control Management organization is looking for a Manager of ICS Control Management APAC Markets Legal Entity focused on ensuring control management is embedded in the day-to-day operations of our acquiring (Global Merchant Service) business. It will involve extensive collaboration with multiple partners across numerous business units, functional areas, and geographies.

The Manager, ICS Control Management APAC Markets Legal Entity will:

• Develop and maintain robust relationships, becoming a trusted specialized 1stLOD OR Partner to facilitate cross-functional collaboration and progress towards maturity and enhancement of the control environment and risk governance 
• Serve as the go-to subject matter expert on risks specific to the local market.

• Ensure risks and issues are effectively identified, assessed, prioritised, and managed across operational risk programs to help the business deliver on local business, regulatory and Legal Entity obligations

• Manage details of specific risk and controls governance forums for GMS, interfacing with org-wide governance processes and committees (e.g., Operational Risk Management Committee) and share insights and lessons learned across forums 
• Facilitate activities to comply with enterprise policies and programs pertaining to specific risk types (e.g., AEMP 88 conduct risk management policy)
• Compile and review topical risk information, including emerging trends, best practices, and regulatory updates relevant to each area of expertise, and support the day-to-day activities required to maintain the repository of topical risk information
• Be a key leader for sharing insights, better practices, themes, etc. through engagement with the central program teams and other Legal Entity governance teams to support the operational risk programs and streamline processes. 

• Support the business for consultation on all operational risk programs to enable BU to strengthen and embed relevant ORM considerations into processes including but not limited to:

  • Support in Process Risk Self-Assessment (PRSA) and Business Self Testing (BST) to ensure they are carried out in a timely manner with appropriate alignments. 

  • Support the Issues Management process by ensuring appropriate action plans are in place, progress is made against milestones, and controls are enhanced to prevent issue reoccurrence

  • Support risk assessments for new products and capabilities, work with business to ensure risk mitigation and controls in place for anticipated risks and monitor through post implementation

  • Support robust AXP Audit program management, driving strong business engagement, and prompt accurate responses to validate findings, ensuring any Management Action Plans (MAPs) have achievable and sustainable action plans

  • Facilitate implementation of Regulatory Change Management applicable to the market through partnership with Compliance, General Counsel’s Organization, and business

  • Review marketing campaign to ensure offers in line with AXP policies and controls in place for anticipated risks

Required Qualifications:

• 7+ Years experience in operational risk management (e.g., within Risk and/or Internal Audit function) and understands critical operational risk management lifecycle activities
• Understanding of critical operational risk management lifecycle activities
• Strong project management, communication, and interpersonal skills, with an ability to interact and obtain buy-in from senior BU/tech counterparts
• Experience in process governance, with a track record of establishing and overseeing robust decision-making processes that align with policies, regulatory frameworks, and/or operational standards
• Proficient analytical and problem-solving skills, with an ability to analyze data, identify trends, and evaluate risk scenarios effectively 

Preferred Qualifications:

• Bachelor's Degree in Finance, Business, Risk Mgmt., or related field; advanced degrees (e.g., MBA, MSc) or certifications are advantageous
• Experience within financial services industry
• Experience in at least one of the following: 
  • Supporting go-to subject matter experts in sharing subject matter expertise within the BU on specialized risks 
  • Facilitating activities to comply with enterprise policies and programs pertaining to specific risk types
  • Support advising on specialized risk types and integration into broader operational risk policies and programs