Senior Manager, Cybersecurity Risk Management

American Express

. Provide independent risk oversight and effective challenge for Vulnerability Management, Compute Security, Cloud Security, Application Security, Network Security, and End User Computing Security .

Posted 9/25/2026full-timeUnited StatesSenior💰 $123,000 - $215,250 per yearWebsite

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityPythonSQL

About the role

Key responsibilities & impact

Provide independent risk oversight and effective challenge for Vulnerability Management, Compute Security, Cloud Security, Application Security, Network Security, and End User Computing Security
Perform risk assessments, thematic reviews, and data-driven analyses to identify emerging cyber risks, control gaps, and trends
Analyze cybersecurity, vulnerability, and operational data using SQL, Python, Power BI, and Excel to develop risk insights and reporting
Assess control effectiveness, remediation plans, risk acceptance decisions, and residual risk exposure
Develop, enhance, and monitor key risk indicators, metrics, and executive reporting on cyber risk posture and trends
Stay current on cyber threats, emerging technologies, industry trends, regulatory expectations, and cybersecurity frameworks
Support risk governance activities, regulatory engagements, audits, committee reporting, and enterprise cybersecurity risk initiatives
Partner across lines of defense to ensure cybersecurity risks are identified, assessed, monitored, and managed according to company policies and regulatory expectations

Requirements

What you’ll need

Bachelor’s Degree in Cybersecurity, Information Systems, Computer Science, Information Technology, Engineering, or a related field
5+ years of experience in Cyber Risk Management, Information Security, Cybersecurity Governance, Technology Risk Management, Audit, or Operational Risk
Experience in one or more cybersecurity domains including Vulnerability Management, Cloud Security, Application Security, Network Security, Infrastructure/Compute Security, EUC Security, or Exposure Management
Strong understanding of cybersecurity risk management principles, security controls, and industry frameworks
Experience identifying risks, analyzing issues, conducting assessments, and translating complex technical topics into business-focused risk insights
Excellent analytical, critical thinking, problem-solving, and communication skills
Ability to work independently and influence stakeholders through constructive challenges and collaboration
Industry certification required: CISSP, CISM, CRISC, CCSP, CISA, or equivalent cybersecurity/risk management certification
Employment eligibility to work with American Express in the United States is required; the company will not pursue visa sponsorship
Preferred: working knowledge of SQL, Python, Power BI, Excel data models, and related technologies
Preferred: experience with cybersecurity frameworks and standards including NIST CSF, NIST 800-53, CIS Controls, ISO 27001, COBIT, MITRE ATT&CK, and FAIR
Preferred: experience with GRC platforms such as Archer
Preferred: experience with AI tools such as ChatGPT and Copilot
Preferred: experience supporting senior management reporting, risk committees, regulatory examinations, or internal audit engagements
Preferred: additional certifications such as GIAC, CCSK, AWS Security Specialty, or Azure Security Engineer

Benefits

Comp & perks

Competitive base salaries
Bonus incentives
6% Company Match on retirement savings plan
Free financial coaching and financial well-being support
Comprehensive medical, dental, vision, life insurance, and disability benefits
Flexible working model with hybrid, onsite or virtual arrangements depending on role and business need
20+ weeks paid parental leave for all parents, regardless of gender, offered for pregnancy, adoption or surrogacy
Free access to global on-site wellness centers staffed with nurses and doctors (depending on location)
Free and confidential counseling support through our Healthy Minds program
Career development and training opportunities