Control Management Analyst – Control Testing & Assurance

Job Description

Senior Analyst-Control Management | American Express

The Tone:
This is an important professional role at American Express. The company’s Global Commercial Services (GCS) division is crucial for growth, and the Control Management team ensures a robust control environment. This position plays a key part in maintaining adherence to regulatory standards and Amex policy by focusing on the independent testing and assurance of controls across the business. You will be instrumental in fostering a proactive and effective control framework within a global financial services context.

The TL;DR
• Role: Professional/Mid-Career
• Location: Global (US and International markets)

• Team: Control Management team within Global Commercial Services (GCS)
• Mission: To foster a proactive and effective control environment that ensures adherence to regulatory standards and Amex policy.
• Tech Stack: Archer, ServiceNow, MS Power Platform, SharePoint, Tableau

What You’ll Actually Do
• Testing & Assurance: Conduct independent testing and assurance of business process controls.
• Control Environment: Contribute to ensuring our control environment is robust, well-documented, and operating effectively as we implement the Risk & Control Self-Assessment (RCSA) framework.
• Stakeholder Collaboration: Engage in extensive collaboration with partners across Business, Products, Compliance, and Data/Technology teams within US and International markets.
• Failure Analysis: Identify the root cause of control failures through strong analytical and problem-solving skills.
• Control Assessment: Assess both control design (i.e., whether the control is properly designed to mitigate risk) and operating effectiveness (i.e., whether the control is working as intended).

The Must-Haves
• Background: Senior professional with a minimum of 4-5 years of experience in Internal Audit, operational risk, internal controls, or a related testing/assurance/audit function.
• Experience: Hands-on experience with control testing methodologies, including sampling, evidence gathering, and documentation. Direct experience with a Governance, Risk, and Compliance (GRC) tool like Archer/ServiceNow for documenting test results.
• Skills: Strong analytical and problem-solving skills with a keen eye for detail, excellent communication and interpersonal skills, proven ability to articulate complex issues to stakeholders clearly and concisely, and the ability to work independently, manage competing priorities, and meet deadlines.
• Bonus: Bachelor’s degree in Finance, Business, Risk Management, or a related field (Master’s/CA/CIA is a plus), familiarity with Risk and Control Self-Assessment (RCSA) frameworks, proven ability to assess both control design and operating effectiveness, experience working in a first-line-of-defense risk or control management role within a global organization, MS Power Platform, SharePoint, and Tableau knowledge, and in-depth knowledge of products, procedures and policies relating to the GCS business portfolio.