Senior Manager-Enterprise Data & AI Risk & Controls

Joining Amex Tech means discovering and shaping your contribution to something big. Here, you can work alongside talented tech teams and build a unique career with the Powerful Backing of American Express. With a range of opportunities to work with the latest technologies, and a commitment to back the broader engineering community through open source, our mission is to power your success. Because Amex Tech is powered by our technology, our culture, and our colleagues.
The Technology organization enables and accelerates the company’s growth strategies, delivering global capabilities and services in support of Amex’s customers and colleagues, while maintaining 24/7 servicing and availability to ensure an uninterrupted, high-quality customer experience. Technology provides the foundation for everything we do in the company while driving differentiation through building and leveraging innovative technology and data insights.

Joining ETS Governance & Control means helping protect American Express customers and company through integrated, intelligence-driven technology risk and control management. Operating at the intersection of technology, governance, and risk, the team partners across the enterprise to modernize the foundation, advance risk intelligence, demonstrate trust at scale, and reduce material risk—enabling innovation with the right controls in place.
 

The Senior Manager, Enterprise Data & AI Risk & Controls serves as the first-line risk and controls lead for Enterprise Data & AI (EDAI) within Enterprise Technology Services (ETS). This role partners with business and technology leaders to embed effective risk management and controls into the delivery of enterprise data, AI, and technology capabilities.

The objective of this role is to identify, assess, manage, and report operational and technology risks across EDAI, ensuring compliance with regulatory requirements, American Express policies, and enterprise standards. By integrating risk management into technology delivery, the role strengthens EDAI's control environment, enables informed decision-making, and supports the secure, compliant, and resilient delivery of data and AI capabilities.

As a trusted risk and controls partner, you will collaborate with Enterprise Control Management, Technical Risk Management, Enterprise Data Risk Management, Operational Risk Management, and Business Unit Data Offices to shape data risk assessment methodologies, support business units in managing data risks, evaluate the effectiveness of controls for AI-enabled use cases, and embed consistent risk management practices across EDAI initiatives.

• Lead the implementation of effective risk and control activities across EDAI, embedding risk management practices into business processes, technology delivery, enterprise data products, and AI capabilities.
• Partner with business and technology leaders to identify, assess, manage, and monitor operational and technology risks across business processes, platforms, products, enterprise data, AI, and supporting technologies. 
• Partner with Enterprise Control Management, Technical Risk Management, Enterprise Data Risk Management, Operational Risk Management, and Business Unit Data Offices to shape data risk assessment methodologies and enable consistent management of enterprise data risks. 
• Integrate risk and control requirements into technology delivery, including cloud platforms, APIs, DevOps, MLOps, enterprise data platforms, AI solutions, and emerging technologies. 
• Lead operational and technology risk assessments, control evaluations, and first-line quality reviews to assess control design and effectiveness and drive continuous improvement. 
• Evaluate the design and effectiveness of controls supporting AI-enabled capabilities, including data governance, model governance, lifecycle controls, and regulatory compliance. 
• Monitor operational and technology risk trends, key risk indicators, control performance, and emerging risks, providing actionable insights and executive reporting to support business decision-making. 
• Partner with Product, Engineering, Compliance, Legal, Enterprise Control Management, Technical Risk Management, Enterprise Data Risk Management, Operational Risk Management, and Internal Audit to strengthen governance, regulatory readiness, and control effectiveness. 
• Drive continuous improvement of EDAI's risk and control framework by identifying opportunities to simplify processes, automate controls, and enhance risk monitoring and reporting. 

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, Risk Management, or a related field; or equivalent experience. 
• Significant experience in Technology Risk, Technology Controls, Operational Risk, Information Security, Governance, Risk & Compliance (GRC), or a related discipline, with expertise in Data, AI or Model Risk. 
• Deep knowledge of technology risk management, enterprise technology controls, operational risk frameworks, and applicable regulatory requirements. 
• Strong understanding of AI governance, model risk management, data governance, and technology risk and control frameworks across the AI and technology lifecycle. 
• Experience leading technology risk assessments, control evaluations, governance reviews, and remediation activities in complex technology environments. 
• Experience partnering with technology, engineering, product, and business teams to embed controls into technology delivery and operational processes. 
• Demonstrated ability to influence senior leaders and collaborate across Technology, Product, Risk, Compliance, Legal, and Audit organizations. 
• Strong analytical, communication, and executive stakeholder management skills.

 

Preferred Qualifications

• Advanced degree in Computer Science, Information Systems, Cybersecurity, Risk Management, or a related field. 
• Experience developing governance frameworks or operating standards for enterprise data, AI, model, or technology risk management. 
• Experience implementing or enhancing technology controls for cloud platforms, AI/GenAI, enterprise data platforms, automation, or modern software delivery practices. 
• Experience applying AI or automation to improve risk assessments, control monitoring, testing, or compliance reporting. 
• Professional certifications such as CISSP, CISM, CRISC, Security+, or equivalent.

 

Employment eligibility to work with American Express in the United States is required as the company will not pursue visa sponsorship for these positions.