Information Security Analyst Job in American Express Company.

Job Description

You Lead the Way. We ve Got Your Back.

At American Express, we know that with the right backing, people and businesses have the power to progress in incredible ways. Whether we re supporting our customers financial confidence to move ahead, taking commerce to new heights, or encouraging people to explore the world, our colleagues are constantly redefining what s possible and we re proud to back each other every step of the way. When you join #TeamAmex, you become part of a diverse community of over 60,000 colleagues, all with a common goal to deliver an exceptional customer experience every day.

Information Technology Risk Assessments protect enterprise value by providing timely and reliable technology risk assessments to influence critical business and technology decisions. Our mission is to; develop and apply a more focused IT Risk lens across multiple functions and business units throughout American Express, enabling the enterprise to proactively identify and respond to technology risks.

Key responsibilities include:

• Perform technical IT risk assessments and control effectiveness assessments using a combination of available metrics and expert interviews
• Help build project management rigor by creating work delivery cadences across team initiatives, manage stakeholder communications, work output tracking, and documentation management.
• Provide guidance on information technology processes, controls, and compliance, and information technology risk management to team members
• Work with technology and business partners across business functions/processes to ensure alignment, understanding and ongoing communication on information technology controls and information technology risk management.
• Ensure various compliance requirements (SOX, BASEL, GLBA, etc) are met through implementation of controls
• Participates in the development of strategies for information technology processes and programs
• Document current and desired future state capabilities, incorporating industry leading technologies that enhance AXP's ability to manage IT risk
• Provide ongoing awareness and education of industry efforts and statistics relevant to information technology
• Facilitates improvement solutions by working with all levels across Technology to determine security technology solutions that align with business strategies, technology strategic directions and compliance objectives
• Provides consultation to internal business partners, customers and vendors in assessing information technology risks and mitigating controls to ensure system availability and processing integrity

Minimum Qualifications

Required Work Experience, Education, Certification / Training:

• Bachelor s degree in information systems, computer science or other related field preferred
• Hands on experience conducting IT risk assessments with risk frameworks (i.e., Open FAIR, NIST)
• Experience with programming/scripting and CI/CD is a plus
• Professional certifications a plus (CRISC, CISA, CISM or equivalent)
• At least 3 years of work experience in information technology
• Technical background with hands-on experience with technologies
• Understanding of risk management and audit (risk policies, procedures and controls)
• Experience in automation and data analytics to enable process improvement preferred.
• Thorough knowledge understanding of risk and control frameworks e.g. NIST, COBIT, PCI DSS

Required Knowledge, Skills and Abilities:

• Experience in key information technology domains including: change management, incident and problem management, event management, SDLC and application development, service continuity/availability.
• Strong knowledge and experience in technology risk assessment and relevant methodologies including quantitative risk management techniques
• Knowledge of applicable information technology standards and regulatory requirements
• Excellent written and oral communication skills
• Highly self-motivated and directed
• Keen attention to detail

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform critical job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.Offer of employment with American Express is conditioned upon the successful completion of a background verification check, subject to applicable laws and regulations.