Operational Risk Manager Jobs in Phoenix, AZ (NOW HIRING)

The objective of the GRC Control Management RCSA team is to drive the consistent and timely execution of the Risk and Control Self-Assessment (RCSA) program, partnering with business leaders to identify, assess, and monitor operational risks, evaluate control effectiveness, and promote a strong risk and control environment.

GRC Control Management team is looking for a Manager of RCSA responsible for overseeing the execution, quality, and governance of the RCSA program. This role will partner with business, risk, compliance, and control management stakeholders to ensure risk assessments are completed consistently, key risks are appropriately identified and evaluated, and control effectiveness is challenged and documented in accordance with enterprise standards.

At American Express, our culture is built on a 175-year history of innovation, shared values and Leadership Behaviors, and an unwavering commitment to back our customers, communities, and colleagues. From delivering differentiated products to providing world-class customer service, we operate with a strong risk mindset, ensuring we continue to uphold our brand promise of trust, security, and service.

As part of Team Amex, you'll experience our powerful backing with comprehensive support for your holistic well-being and many opportunities to learn new skills, develop as a leader, and grow your career. Here, your voice and ideas matter, your work makes an impact, and together, you will help us define the future of American Express.

We back you with benefits that support your holistic well-being so you can be and deliver your best. This means caring for you and your loved ones' physical, financial, and mental health, as well as providing the flexibility you need to thrive personally and professionally:

• Competitive base salaries
• Bonus incentives
• 6% Company Match on retirement savings plan
• Free financial coaching and financial well-being support
• Comprehensive medical, dental, vision, life insurance, and disability benefits
• Flexible working model with hybrid, onsite or virtual arrangements depending on role and business need
• 20+ weeks paid parental leave for all parents, regardless of gender, offered for pregnancy, adoption or surrogacy
• Free access to global on-site wellness centers staffed with nurses and doctors (depending on location)
• Free and confidential counseling support through our Healthy Minds program
• Career development and training opportunities

For a full list of Team Amex benefits, visit our Colleague Benefits Site.

• 4+ Years experience in operational risk management (e.g., within Risk and/or Internal Audit function). Understanding of critical operational risk management lifecycle activities  
• Demonstrated experience leading or executing Risk and Control Self-Assessments (RCSAs), risk assessments, control evaluations, or similar governance programs.
• Strong understanding of operational risk management frameworks, control design, control effectiveness assessment, and issue management practices.
• Proven ability to manage multiple deliverables, stakeholders, and competing priorities within structured governance environments.
• Excellent written and verbal communication skills, including experience presenting risk-related matters to senior leadership.
• Strong analytical, problem-solving, and critical-thinking capabilities with the ability to challenge risk assessments and identify control gaps.  
• Bachelor's Degree in Finance, Business, Risk Mgmt., or related field; advanced degrees (e.g., MBA, MSc) or certifications are advantageous  
• Experience in at least one of the following:   
  • Facilitating RCSA workshops, risk identification sessions, and control assessment reviews.

  • Interpreting and applying operational risk, compliance, or regulatory requirements within a large financial institution.

  • Partnering with first-line business teams to drive accountability for risk ownership and control effectiveness. 

Employment eligibility to work with American Express in the United States is required as the company will not pursue visa sponsorship for these positions.

• Lead and coordinate end-to-end execution of the RCSA program across assigned RAUs, ensuring adherence to enterprise standards, timelines, and quality expectations.
• Facilitate risk identification and assessment discussions with business stakeholders to ensure material risks and key controls are appropriately documented.
• Challenge and review risk and control assessments for completeness, accuracy, and consistency with established methodology.
• Perform quality assurance reviews of RCSA documentation, including risk statements, control inventories, control assessments, and supporting evidence.
• Drive completion of RCSA milestones and deliverables, escalating risks, issues, and execution challenges as appropriate.
• Analyze RCSA outputs, issues, events, and control performance trends to identify emerging risks, thematic concerns, and opportunities for control enhancement.
• Partner with business, compliance, audit, and ORM stakeholders to resolve assessment gaps and ensure sustainable remediation of identified control weaknesses.
• Prepare and present RCSA status updates, key observations, and risk themes to senior management and governance forums.
• Support continuous improvement initiatives to enhance RCSA effectiveness, consistency, reporting, and stakeholder engagement.