VP, International Resilience Risk Management

The Global Risk & Compliance (GRC) organization serves as American Express’ independent risk management function.

GRC maintains the enterprise risk framework, provides oversight and challenge, and monitors key risks.

By embedding risk discipline into strategy and operations, GRC enables responsible growth, innovation, and long-term value creation while protecting customers and shareholders.

The Technical Risk Management (TRM) team safeguards the enterprise, globally, by identifying, assessing, monitoring & reporting risks across Information & Cyber Security Risk, Technology Risk, Data Risk, Resiliency Risk, and AI Risk.

The Resiliency Risk Management (RRM) organization within TRM provides independent second-line risk management oversight of resiliency risks across American Express globally.

RRM is responsible for establishing and maintaining the enterprise resiliency risk management framework and providing independent oversight and credible challenge across the interconnected capabilities that enable American Express to prepare for, withstand, respond to and recover from operational disruptions.

These capabilities include Business Resiliency, Technology and Cyber Resilience, Third-Party Risk, Site and Workforce Resiliency, Disaster Recovery and Crisis Management.

RRM identifies, assesses, monitors and reports resiliency risk and partners across the enterprise to promote effective risk management, governance and adherence to applicable regulatory requirements and supervisory expectations.

The Vice President, International Resilience Risk Management is a newly established leadership role responsible for leading independent second-line risk oversight of operational resilience across American Express’ International businesses and Legal Entities.

Reporting directly to the Global Head of Resiliency Risk Management Oversight, the incumbent will lead the international implementation and ongoing oversight of the enterprise resiliency risk management framework, while ensuring appropriate consideration of local regulatory requirements and supervisory expectations.

This role will provide independent oversight and credible challenge across the interconnected disciplines that contribute to operational resilience, including Business Resiliency, Technology and Cyber Resilience, Third-Party Risk, Site and Workforce Resiliency, Disaster Recovery, Crisis Management, Business Continuity Management and broader Operational Risk Management. This role will partner extensively with International Risk Officers, Legal Entity leadership, first-line resilience teams, Global Process Owners, Technology, Cybersecurity, Third-Party Risk Management and other risk partners to establish a consistent, scalable and locally relevant approach to resilience risk management.