Analyst-Ops Risk Management

The Global Risk Compliance Organization (GRC) is an independent risk management function, led by the Chief Risk Officer, with the objective of ensuring that American Express operates in a safe, sound, and fully compliant manner with all applicable regulatory expectations. GRC creates and maintains the overall risk management framework, performs independent risk management assessments, and monitors applicable risks.

The objective of the GRC Transformation and Control Management (CM) Reporting role will coordinate and support control testing activities, develop executive reporting and insights, partner across risk organizations, to strengthen the control environment. This role will drive process standardization and continuous improvement, leverage data and AI-enabled solutions to enhance efficiency and provide actionable reporting to support risk and control management decisions.

Global Risk Compliance (GRC) is looking for an Analyst for GRC Transformation and Control Management Reporting focused on ensuring control management is embedded in the day-to-day operations of our organization. It will involve extensive collaboration with multiple partners across numerous business units, functional areas, and geographies.

• 2+ Years experience in Operational Risk, Governance, Risk, Compliance (GRC), Controls Management, Internal Audit, or a related discipline.
• Bachelor s degree in Business, Finance, Accounting, Risk Management, Information Systems, or related field; advanced degrees (e.g., MBA, MSc).
• Experience working in financial services at a large, global bank.
• Strong project management and organizational skills, with experience tracking deliverables, managing timelines, coordinating across multiple stakeholders, and driving initiatives to completion.
• Proficiency in data analytics, including data validation, trend analysis, reporting, and translating data into actionable business insights.

• Strong analytical, communication, and presentation skills with the ability to translate complex information into executive-level insights.

Preferred Qualifications:

• Experience with control testing, risk and control reporting, data analysis, and stakeholder management.
• Working knowledge of operational risk and controls, including risk identification and assessment, control design and effectiveness, issue management, and control testing practices.
• Experience driving transformational change across the enterprise.
• Knowledge of AI, automation, process improvement methodologies, or continuous improvement initiatives.

The Analyst, GRC, Transformation and Control Management Reporting will:

• Coordinate and support control testing activities across multiple GRC stakeholders, including tracking testing execution, results, and remediation efforts.
• Develop executive reporting, dashboards, and presentations that clearly communicate control performance, risk trends, program status, and actionable recommendations.
• Perform data validation, quality assurance, and analysis of control management data to identify key trends, risks, insights, and opportunities for improvement.
• Support regular status updates and communicate progress, findings, and risks to key stakeholders and leadership teams.

• Partner with Risk, Compliance, Audit, and business teams to streamline processes, improve governance, and identify opportunities to leverage AI, automation, and analytics to enhance control management activities.