The Global Risk & Compliance (GRC) organization serves as American Express’ independent risk management function. GRC maintains the enterprise risk framework, provides oversight and challenge, and monitors key risks. By embedding risk discipline into strategy and operations, GRC enables responsible growth, innovation, and long-term value creation while protecting customers and shareholders.

The Technical Risk Management (TRM) team safeguards the enterprise, globally, by identifying, assessing, monitoring & reporting risks across Information & Cyber Security Risk, Technology Risk, Data Risk, Resiliency Risk, and AI Risk.

The Resiliency Risk Management (RRM) organization within TRM provides independent second-line risk management oversight of resiliency risks across American Express globally. RRM is responsible for establishing and maintaining the enterprise resiliency risk management framework and providing independent oversight and credible challenge across the interconnected capabilities that enable American Express to prepare for, withstand, respond to and recover from operational disruptions. These capabilities include Business Resiliency, Technology and Cyber Resilience, Third-Party Risk, Site and Workforce Resiliency, Disaster Recovery and Crisis Management. RRM identifies, assesses, monitors and reports resiliency risk and partners across the enterprise to promote effective risk management, governance and adherence to applicable regulatory requirements and supervisory expectations.

The Vice President, International Resilience Risk Management is a newly established leadership role responsible for leading independent second-line risk oversight of operational resilience across American Express’ International businesses and Legal Entities. Reporting directly to the Global Head of Resiliency Risk Management Oversight, the incumbent will lead the international implementation and ongoing oversight of the enterprise resiliency risk management framework, while ensuring appropriate consideration of local regulatory requirements and supervisory expectations.

This role will provide independent oversight and credible challenge across the interconnected disciplines that contribute to operational resilience, including Business Resiliency, Technology and Cyber Resilience, Third-Party Risk, Site and Workforce Resiliency, Disaster Recovery, Crisis Management, Business Continuity Management and broader Operational Risk Management. This role will partner extensively with International Risk Officers, Legal Entity leadership, first-line resilience teams, Global Process Owners, Technology, Cybersecurity, Third-Party Risk Management and other risk partners to establish a consistent, scalable and locally relevant approach to resilience risk management.

At American Express, our culture is built on a 175-year history of innovation, shared values and Leadership Behaviors, and an unwavering commitment to back our customers, communities, and colleagues. From delivering differentiated products to providing world-class customer service, we operate with a strong risk mindset, ensuring we continue to uphold our brand promise of trust, security, and service.

As part of Team Amex, you’ll experience our powerful backing with comprehensive support for your holistic well-being and many opportunities to learn new skills, develop as a leader, and grow your career. Here, your voice and ideas matter, your work makes an impact, and together, you will help us define the future of American Express.

We back you with benefits that support your holistic well-being so you can be and deliver your best. This means caring for you and your loved ones' physical, financial, and mental health, as well as providing the flexibility you need to thrive personally and professionally:

• Competitive base salaries
• Bonus incentives
• Support for financial-well-being and retirement
• Comprehensive medical, dental, vision, life insurance, and disability benefits (depending on location)
• Flexible working model with hybrid, onsite or virtual arrangements depending on role and business need
• Generous paid parental leave policies (depending on your location)
• Free access to global on-site wellness centers staffed with nurses and doctors (depending on location)
• Free and confidential counseling support through our Healthy Minds program
• Career development and training opportunities

• Experience within banking, payments or broader financial services, particularly within a large, internationally regulated organization; relevant experience in other highly regulated industries with directly transferable resilience expertise will also be considered.
• Experience within a second-line-of-defense risk management function, with demonstrated responsibility for independent risk oversight, credible challenge, risk assessment and escalation.
• Experience leading resilience risk oversight across multiple countries or Legal Entities, including critical business services, dependency mapping, impact tolerances, scenario testing and remediation.
• Experience overseeing significant operational disruptions, technology outages, cyber events or other resilience events.
• Relevant professional certifications in Operational Resilience, Business Continuity Management, Disaster Recovery, Risk Management, Technology Risk or Cybersecurity.

• Advanced degree in business, risk management, technology, engineering or a related discipline is preferred.

Employment eligibility to work with American Express in the UK is required as the company will not pursue visa sponsorship for these positions.

• Lead independent second-line oversight of operational resilience risk across International businesses and Legal Entities, ensuring alignment with enterprise frameworks and standards while addressing applicable local regulatory requirements.
• Lead the international implementation and ongoing application of the enterprise resiliency risk management framework, providing effective oversight and credible challenge across Business Resiliency, Business Continuity Management, Disaster Recovery, Crisis Management, Technology and Cyber Resilience, Third-Party Risk, and Site and Workforce Resiliency.
• Establish and communicate a consolidated International resilience risk profile through the identification, assessment, monitoring and reporting of material risks, vulnerabilities, control weaknesses and emerging risk themes.
• Provide independent review and challenge of key operational resilience activities, including critical and important business service identification, dependency mapping, impact tolerances, scenario testing, controls and remediation.
• Partner with International Risk Officers, Legal Entity leadership and enterprise risk teams to translate enterprise requirements into effective local oversight while maintaining consistency across jurisdictions.
• Lead International resilience risk governance and reporting, including risk appetite, metrics, executive reporting and escalation of material risks to senior management and relevant governance committees.
• Lead and develop locally based International risk colleagues, providing functional direction and promoting consistent standards of risk oversight, credible challenge and escalation across markets.
• Monitor evolving global regulatory requirements and supervisory expectations, including DORA, PRA, OCC and FFIEC guidance, and lead or support resilience-related regulatory examinations, audits and supervisory engagements.
• Provide independent risk oversight during significant operational disruptions and partner across RRM, GRC, and the first line to identify lessons learned, strengthen resilience capabilities and promote a strong risk-management culture.