Senior Associate - ETS Exam Management

About American Express

At American Express, our culture is built on a 175-year history of innovation, shared values and Leadership Behaviors, and an unwavering commitment to back our customers, communities, and colleagues. As part of Team Amex, you'll experience this powerful backing with comprehensive support for your holistic well-being and many opportunities to learn new skills, develop as a leader, and grow your career.

Here, your voice and ideas matter, your work makes an impact, and together, you will help us define the future of American Express.

How will you make an impact in this role?

The Senior Associate, ETS Exam and Audit Management, is responsible for managing Enterprise Technology Services (ETS) audit and examination requests from external corporate auditors. This role partners closely with external auditors and ETS control owners and subject matter experts to facilitate effective communication and ensure the accurate, timely delivery of materials that demonstrate compliance with applicable regulatory frameworks and the effectiveness of IT General Controls (ITGC).

Key Responsibilities:

• Act as a primary point of coordination between external auditors and ETS partners to ensure audit and exam requests are clearly defined, well understood, and fulfilled accurately and on time.
• Partner with ETS control owners and subject matter experts to manage request intake, clarify expectations, and support timely evidence submission.
• Track, monitor, and report the status of open audit and exam requests, proactively managing deadlines and communicating risks, dependencies, or extension needs to both internal stakeholders and external auditors.
• Review and assess evidence provided by control owners to validate completeness, accuracy, and alignment with audit requirements and control expectations.
• Support the end-to-end flow of audit and examination information, including schedules, scope, results, and status reporting.
• Contribute to continuous improvement of audit and exam management processes, including documentation, tracking, and communication practices.

Minimum Qualifications:

• 3+ years of experience in Information Security, Technology, Risk Management, or Audit.
• Bachelor’s degree or equivalent professional experience.
• Experience working in highly regulated environments with complex technologies and business operations.
• Demonstrated experience tracking, monitoring, and reporting project or risk metrics for audiences at multiple organizational levels.
• Excellent written and verbal communication skills, strong collaborative abilities, and the capability to lead and manage audit-related calls with external auditors.
• Proven ability to manage multiple priorities and deliver results within established timelines.
• Foundational understanding of information security and technology control environments, including ITGC concepts.

Preferred Qualifications:

• Professional certifications in security, risk, or regulatory disciplines (e.g., CISA, CISM, CRISC).
• Strong risk management capabilities, including the ability to assess control effectiveness and link risks to mitigation activities.
• Excellent written and verbal communication skills, with the ability to translate complex technical or control-related topics for diverse stakeholders.
• Experience in technology and information security domains with a strong emphasis on IT General Controls.
• Prior experience working in second line, third line, or regulatory audit functions.
• Demonstrated success working with diverse stakeholder groups, under tight deadlines, and driving alignment in complex or high-pressure situations.
• Ability to work effectively across Technology, Information Security, and Audit teams in a highly collaborative environment.

Key skills/competency

• Audit Management
• Regulatory Compliance
• IT General Controls (ITGC)
• Risk Management
• Stakeholder Coordination
• Information Security
• Communication Skills
• Process Improvement
• Evidence Review
• Project Tracking