Information Security Manager-IT Risk

Company: American Express
Location: Stratford
Posted on: April 10, 2021

Job Description:

You Lead the Way. We've Got Your Back.

At American Express, we know that with the right backing, people and businesses have the power to progress in incredible ways. Whether we're supporting our customers' financial confidence to move ahead, taking commerce to new heights, or encouraging people to explore the world, our colleagues are constantly redefining what's possible - and we're proud to back each other every step of the way. When you join #TeamAmex, you become part of a diverse community of over 60,000 colleagues, all with a common goal to deliver an exceptional customer experience every day.

The Information Security Technology Risk Management function protects enterprise value by providing timely and reliable technology risk assessments to influence critical business and technology decisions. Our mission is to; regularly and accurately measure, catalog, and communicate technology risk.

Key Responsibilities Include

• Perform technical Information Technology risk assessments and control effectiveness assessments using a combination of available metrics and expert interviews
• Help build project management rigor by creating work delivery cadences across team initiatives, manage stakeholder communications, work output tracking, and documentation management.
• Provide guidance on information technology processes, controls, and compliance, and information risk management to team members
• Work with technology and business partners across business functions/processes to ensure alignment, understanding and ongoing communication on IT controls
• Conducts technology and security assessments of applications and platforms with respect to design and implementation of system and application code
• Considers vulnerabilities and mitigations to reduce risk
• Participates in the development of strategies for information management processes and programs
• Creates reports and other materials to assist in prioritizing activities related to various threats to web and network operations
• Document current and desired future state capabilities, incorporating industry leading technologies that enhance AXP's ability to manage IT risk and protect data
• Provide ongoing awareness and education of industry efforts and statistics relevant to information security
• Facilitates improvement solutions by working with all levels across Technology to determine security technology solutions that align with business strategies, technology (IS and IT) strategic directions and compliance objectives
• Provides consultation to internal business partners, customers and vendors in assessing information security risks and mitigating controls to protect corporate intellectual capital, and other sensitive data
  
  Minimum Qualifications
  
  Required Work Experience, Education, Certification / Training:
  
  • Bachelor's degree in computer science, information systems, network security or other related field preferred
  • Hands on experience conducting IT risk assessments and familiarity with risk frameworks (i.e., Open FAIR, NIST)
  • Experience with programming/scripting and CI/CD is a plus
  • Professional certifications a plus (CISSP, CRISC, CISA, PCI, CISM or equivalent)
  • At least 5 years of work experience in information security
  • Technical background with hands-on experience across a variety of technologies
  • Proficiency in risk management and audit (risk/security policies, procedures and controls)
    
    Required Knowledge, Skills And Abilities
    
    • Requires knowledge of several of the business and technical functional/capabilities in the following areas:
      
      • Security and Technology architecture; security engineering; threat management; vulnerability management; electronic discovery; computer and data breach incident management; data protection; 3rd party/vendor management; security monitoring; cryptography; cloud security; security operations and administration; access management; security policies and standards; security awareness; business continuity; disaster recovery; IT risk management and controls; web security; data security; network security; system security, technology operations and compliance
      • Strong knowledge and experience in information technology (IT) risk assessment and relevant methodologies including quantitative risk management techniques
      • Demonstrated ability to influence without authority
      • Excellent written and oral communication skills
      • Highly self-motivated and directed
      • Attention to detail and experience leading programs across a breadth of expertise
        Employment eligibility to work with American Express in the U.S. is required as the company will not pursue visa sponsorship for these positions.
        
        American Express is an equal opportunity employer and makes employment decisions without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability status, age, or any other status protected by law.
        
        Tags
        
        ReqID:
        Schedule (Full-Time/Part-Time): Full-time
        Date Posted: Mar 29, 2021, 1:44:11 PM
        
        

Keywords: American Express, Visalia , Information Security Manager-IT Risk, IT / Software / Systems , Stratford, California