Senior Analyst-Control Management

This role sits within the U.S. Consumer Services (USCS) Control Management Risk ID & Assessment team. The team identifies risks across business processes, systems, and platforms, develops risk mitigation strategies, and proactively flags high-risk themes for intervention and control enhancement.

About the role

The Sr. Analyst of Risk ID & Assessment will ensure control management is embedded in the day-to-day operations of the organization, with a focus on New Product Development, Personal Loans, Line Management, Account Statement, and Card Member Legal Disclosures servicing capabilities. This role involves extensive collaboration with multiple partners across numerous business units and functional areas.

Responsibilities

• Assist in the identification and assessment of operational, regulatory, compliance, and customer experience risks throughout business processes and systems (along with business process owners).
• Facilitate Business Units in execution of risk assessments (e.g., Risk Control Self Assessments (RCSAs) and Process Self Risk Assessments (PRSAs)), including assessments tied to New Product Development, Personal Loans, Line Management, Account Statement, and Card Member Legal Disclosures.
• Support further assessments and testing/QA programs to ensure regulatory and internal standards are met (e.g., periodic PRSA reviews, control testing, and assessment criteria updates aligned to regulatory and business changes).
• Support control monitoring (supplemental to BU process owners testing) and compile key operational risk trends, activities, customer impacts, and events.
• Proactively help identify areas of high-risk for intervention, including conducting independent quality assurance, vertical process testing, and thematic reviews across customer-facing operational processes.
• Support thematic risk reporting (levels, trends, root causes, and emerging themes).
• Categorize controls and map against risks and processes (e.g., cross-BU process-control mapping, risk/control inventories, and process documentation).
• Support BU identification of risks and spotting areas where product, process, servicing, or control enhancements may be required within New Product Governance (NPG) and change management activities.
• Support issue management, corrective action tracking, remediation validation, and sustainable control enhancement activities.
• Support risk management practices within the business, including governance routines, KRI monitoring, and escalation processes.
• Maintain risk dashboards, key risk indicators (KRIs), and updated risk profiles/risk registers for ongoing monitoring.
• Support sharing insights, better practices, themes, and operational risk learnings across the enterprise.

Requirements

• 2+ years experience in operational risk management (e.g., within Risk, Control Management, Compliance, and/or Internal Audit functions) with an understanding of critical operational risk management lifecycle activities.
• Project management, communication, and interpersonal skills with the ability to collaborate across business, technology, product, servicing, and governance teams.
• Experience in process governance, with an understanding of processes aligned to policies, regulatory frameworks, and/or operational standards.
• Sound analytical and problem-solving skills, with an ability to analyze data, identify trends, evaluate risk scenarios, and support effective risk-based decision making.
• Experience supporting risk assessments, control evaluations, monitoring, testing, or issue management activities across operational or customer-facing processes.
• Employment eligibility to work with American Express in the United States (the company will not pursue visa sponsorship for this position).

Qualifications

• Bachelor’s Degree in Finance, Business, Risk Management, or related field; advanced degrees (e.g., MBA, MSc) or certifications are advantageous.
• Experience supporting lending products, pricing processes, digital payment capabilities, customer servicing operations, and/or regulated operational processes.
• Experience supporting or executing Risk Control Self Assessments (RCSAs), Process Self Risk Assessments (PRSAs), control evaluations, and operational risk assessments.
• Experience in at least one of the following:
  • Supporting identification of operational risks throughout business processes and systems.
  • Facilitating risk assessment performance in addition to further assessments and testing programs to ensure regulatory and internal standards are met.
  • Supporting independent control monitoring, including identification of control improvements and monitoring enhancements.
  • Supporting the identification of areas of risk for intervention, including conducting independent quality assurance and process testing.
  • Compiling thematic risk reporting to provide actionable insights on risk levels, emerging trends, and root causes.
  • Supporting New Product Governance (NPG), issue remediation, governance reporting, or control documentation activities.

Benefits

• Competitive base salaries and bonus incentives.
• 6% Company Match on retirement savings plan.
• Free financial coaching and financial well-being support.
• Comprehensive medical, dental, vision, life insurance, and disability benefits.
• Flexible working model with hybrid, onsite, or virtual arrangements depending on role and business need.
• 20+ weeks paid parental leave for all parents, regardless of gender, offered for pregnancy, adoption, or surrogacy.
• Free access to global on-site wellness centers staffed with nurses and doctors (depending on location).
• Free and confidential counseling support through the Healthy Minds program.
• Career development and training opportunities.