Impress employers and recruiters.
Choose from hundreds of resume examples.
Impress employers and recruiters.
Choose from hundreds of resume examples.
Target Resume Now
Tailor your resume to this Senior Manager, UK Chief Risk Officer, Technology Risk role.
Rezi rewrites your resume against American Express's job description. Free.
Tailor your resume to this Senior Manager, UK Chief Risk Officer, Technology Risk role.
Rezi rewrites your resume against American Express's job description. Free.
Don't guess if your resume is good enough.
See how it scores against the Senior Manager, UK Chief Risk Officer, Technology Risk posting at American Express — free, in seconds.
Don't guess if your resume is good enough.
See how it scores against the Senior Manager, UK Chief Risk Officer, Technology Risk posting at American Express — free, in seconds.
About the Role
The Manager, Technology Risk, Enterprise Risk Management UK, within the GRC organization, is responsible for establishing the second line of defense framework for Technology Risk areas in the UK market. This role involves identifying, assessing, measuring, managing, and reporting risk, and strengthening the governance structure for UK businesses.
Responsibilities
- Participate in the Risk Appetite Framework (RAF) refresh process and align International Legal Entities (ILE) Technology Risk metrics with Enterprise standards.
- Collaborate with enterprise risk type 2LOD teams to coordinate challenge to enterprise/local risk type 1LOD teams.
- Understand and articulate the Technology Risk profile of the Legal Entity (LE) based on aggregated data and reporting.
- Act as the main point of contact for Technology Risk for LE regulators, Audit, and ILE Leadership, and respond to requests for Technology Risk program/results.
- Serve as the Technology Risk representative for LE specific committees and a point of contact for Technology Risk at LE board meetings.
- Provide input to ILE Technology Risk policies and frameworks to ensure compliance with UK requirements.
- Influence Enterprise Technology Risk Frameworks/Policies/Programs to ensure they are fit for purpose for ILE and support ILE deployment of Enterprise Technology Risk programs.
- Advise the business on the applicability and effective execution of Technology Risk frameworks.
- Coordinate with the Enterprise Risk Lead on 2nd Line testing, risk assessments, risk appetite reviews, and review/challenge activities.
- Ensure appropriate communication of risks between ILE and Enterprise.
- Support the ILE CRO in oversight duties aligned to the Risk Governance Framework and applicable policies, reviewing Technology Risk issues and findings affecting ILE, and overseeing effective remediation.
- Lead 2nd Line of Defense ILE oversight for Regulatory Change Management related to Technology Risk.
- Develop LE metrics dashboards, including RAF metrics, aligned with applicable regulatory requirements, in collaboration with the Enterprise team.
- Perform second-level review of all Information Technology (IT), Information Security (IS), Data, AI, and Business Disruption risk questionnaires submitted to Regulators.
- Participate in operational resilience incident communication channels to monitor incidents that may require regulatory notification (e.g., DORA requirements).
Requirements
- 5+ years of leadership experience in risk management or a similar role.
- Strong business acumen with a risk-reward control perspective.
- Experience interacting with regulators and familiarity with the UK regulatory landscape and requirements.
- Working understanding of the UK and EU regulatory landscape applicable to technology, data, cybersecurity, resilience, and AI risks, including FCA/PRA supervisory expectations, DORA, GDPR, EU Artificial Intelligence Act, UK Government's AI Regulation Framework, NCSC CAF, and UK/EU data protection requirements.
- Understanding of risk assessment methodologies, frameworks, and industry standards.
- Experience with Governance, Risk and Compliance tools (e.g., Archer / ServiceNow).
- Demonstrated ability to successfully manage multiple priorities under pressure.
- Fluency in English (verbal and written).
- Proven leader who can build, inspire, and coach a team with a passion for the business.
- Excellent relationship and influence management skills with the ability to build productive relationships across teams and levels of seniority.
- Self-confident with a strong sense of integrity and the ability and willingness to challenge and be challenged.
- Proactive in identifying issues, delivering and escalating key findings, and advising on recommended solutions.
- Ability to communicate oversight findings to colleagues, business partners, and senior leaders.
- Strong verbal and written communication skills.
Skills
- Technology Risk
- Risk Management
- Risk Appetite Framework (RAF)
- Governance, Risk and Compliance (GRC) tools
- Regulatory Compliance
- Information Technology (IT)
- Information Security (IS)
- Data Risk
- AI Risk
- Business Disruption Risk
- Operational Resilience
- Regulatory Change Management
Location
- UK
Work Type
- Hybrid
- Onsite
- Virtual
Experience Level
- Manager
- 5+ years leadership experience
Education Level
- Advanced degree in business, economics, engineering, or a related field is preferred.
- Industry certifications in cybersecurity, operational resilience, business continuity management, Disaster Recovery or AI risk management is preferred.
Benefits
- Competitive base salaries
- Bonus incentives
- Support for financial-well-being and retirement
- Comprehensive medical, dental, vision, life insurance, and disability benefits (depending on location)
- Flexible working model with hybrid, onsite or virtual arrangements depending on role and business need
- Generous paid parental leave policies (depending on your location)
- Free access to global on-site wellness centers staffed with nurses and doctors (depending on location)
- Free and confidential counseling support through our Healthy Minds program
- Career development and training opportunities
About the Company
- The Global Risk & Compliance (GRC) organization serves as American Express’ independent risk management function, maintaining the enterprise risk framework, providing oversight and challenge, and monitoring key risks to enable responsible growth and protect customers and shareholders.
- The UK Chief Risk Officer (CRO) organization within GRC is responsible for identifying and managing risk across all processes at American Express in the UK.
- American Express' culture is built on a 175-year history of innovation, shared values, and Leadership Behaviors, with an unwavering commitment to back customers, communities, and colleagues.
- The company delivers differentiated products and world-class customer service with a strong risk mindset, upholding its brand promise of trust, security, and service.
- Team Amex offers comprehensive support for holistic well-being, opportunities for skill development, leadership growth, and career advancement.
Equal Opportunity
- Offer of employment with American Express is conditioned upon the successful completion of a background verification check, subject to applicable laws and regulations.