Manager - Risk Management Operational Resilience

At American Express, our culture is built on a 175-year history of innovation, shared values and Leadership Behaviors, and an unwavering commitment to back our customers, communities, and colleagues. As part of Team Amex, you'll experience this powerful backing with comprehensive support for your holistic well-being and many opportunities to learn new skills, develop as a leader, and grow your career.

Here, your voice and ideas matter, your work makes an impact, and together, you will help us define the future of American Express.

How will you make an impact in this role?

Operational Resilience is the ability of an organization to withstand, adapt to, and recover from unexpected disruptions such as cyberattacks, natural disasters or technical failures. It extends beyond business continuity by addressing both internal and external risks that could impact the delivery of products or services. Operational Resilience involves anticipating potential disruptions, strategizing preventive measures, and ensuring the organization can continue serving its customers without interruption during such events.

Operational Resilience program is part of the Business Continuity Management (BCM) team in Enterprise Shared Services (ESS) at American Express. This team works with colleagues across the Company to implement and oversee resilience, continuity, and response capabilities to safeguard employees, customers, and products and services. The team coordinates planning and preparedness for potential service disruptions and other crises. The team also coordinates global or regional crisis responses, monitors developing issues while assessing organizational preparedness, and drives after-action crisis analyses and reporting for senior leaders.

As the Manager of Operational Resilience, you will be part of a team of professionals assisting to design and implement the operational resilience program across the enterprise, to be compliant with interagency guidance on operational resilience. In addition, you will also be responsible for supporting crisis monitoring and reporting for potential enterprise operational disruptions and crisis response for actual disruptions.

Key Responsibilities but not limited:

* Collaborate with various stakeholders to develop and implement the Operational Resilience framework, including but not limited to:

* Creation and maintenance of procedures, and standards.

* Engage in depth reviews to establish and maintain the Critical Business Services (CBSs) including mapping of dependencies to locations, people, third parties, and systems, and defining impact tolerance levels for potential outages.

* Conduct resilience assessing initiates - including Critical Business Services scenario testing, in collaboration with the CBS owner and related operational programs, such as Information Security, Information Technology, Operational Risk and Third Party Risk Management.

* Serve as trusted advisor, offering constructive feedback and challenge resilience plans.

* Support Operational Resilience reporting to required committees and AXP Board.

* Partner with operational resilience teams in international markets to ensure consistent implementation of operational resilience framework.

* Stay updated on industry trends and evolving global regulatory requirements around Operational Resilience.

Minimum Qualifications:

* Minimum of 5-7 years of experience in operational resilience, business continuity, crisis management, or operational risk.

* In-depth understanding of regulatory expectations related to operational resilience (e.g., regulatory frameworks from the OCC).

* Strong project management and organizational skills, with ability to drive initiatives across multiple business lines.

* Excellent communication and stakeholder management skills, including experience presenting to senior leadership.

* Demonstrated ability to analyze complex processes, identify critical dependencies, and design practical resilience solutions.

Preferred Qualifications:

* Master's degree in business administration, Risk Management, or a related discipline.

* Professional certifications such as BCI (Business Continuity Institute), Disaster Recovery International Institute - DRII certification (e.g. CBCP), ISO 22301 Lead Implementer, or CISSP/CISM for those with a technology focus.

* Experience in enterprise-level resilience strategy development, ideally within financial services or other regulated industries.

* Strong understanding of emerging risks, third-party risk management, and critical service mapping.

* Proven ability to partner with cross-functional teams (Technology, Risk, Compliance, Operations) to embed resilience principles.

* Familiarity with data analytics and reporting tools to assess and monitor operational resilience performance metrics.

Salary Range: $89,250.00 to $ annually + bonus + benefits

The above represents the expected salary range for this job requisition. Ultimately, in determining your pay, we'll consider your location, experience, and other…