Director, Technology Risk and Control

Responsibilities

• Serve as the accountable risk and control lead for software development and enterprise architecture domains.
• Provide strategic risk advisory and credible challenge to senior technology leaders regarding risk identification and mitigation.
• Lead RCSA execution, including risk identification, control assessment, and residual risk evaluation.
• Oversee risk assessments related to software delivery, engineering practices, application architecture, and platform dependencies.
• Provide risk advisory for AI/ML and emerging technology solutions, including AI-assisted software development and lifecycle governance.
• Develop risk metrics, key risk indicators, and management reporting to support informed decision-making.
• Lead and develop a team of risk professionals, fostering a culture of accountability and continuous improvement.

Requirements

• Bachelor’s degree in information technology, information security, risk management, or a related discipline.
• 10+ years of experience in technology risk management, software engineering, enterprise architecture, or cybersecurity.
• 5+ years of leadership experience in risk, controls, governance, or technology functions.
• Demonstrated experience leading RCSA programs and technology risk assessments in large, complex organizations.
• Strong understanding of software development methodologies (SDLC), cloud environments, and enterprise architecture practices.
• Proven ability to influence senior executives and provide effective challenge on strategic technology decisions.

Preferred Qualifications

• Experience leading technology risk governance across SDLC, engineering, and emerging technology domains.
• Experience supporting regulatory examinations and internal or external audits.
• Professional certifications such as CISA, CISSP, CRISC, CISM, or CGEIT.
• Advanced degree in information security, risk management, or business.

About the Company

American Express is a global company built on a 175-year history of innovation and a commitment to backing its customers, communities, and colleagues. We operate with a strong risk mindset to uphold our brand promise of trust, security, and service.