American Express

Manager - Technology Risk & Control

Posted On

July 25, 2025

Location

Gurgaon, Haryana

Experience Level

Freshers/Experienced

Job Type

Permanent

Apply By

Aug. 17, 2025

Job Description

At American Express, our culture is built on a 175-year history of innovation, shared values and Leadership Behaviors, and an unwavering commitment to back our customers, communities, and colleagues. As part of Team Amex, you'll experience this powerful backing with comprehensive support for your holistic well-being and many opportunities to learn new skills, develop as a leader, and grow your career.

Here, your voice and ideas matter, your work makes an impact, and together, you will help us define the future of American Express.

How will you make an impact in this role?

Responsible for contacting clients with overdue accounts to secure the settlement of the account. Also they do preventive work to avoid future overdues with accounts that have a high exposure.

The Information Security Manager function resides within the Regional Information Security Office and is responsible for control enforcement, cybersecurity awareness, reporting and enablement for American Express in Asia Pacific Region. The incumbent will be responsible for helping design and execute a regionalized information security risk management strategy closely informed by the APAC regulatory landscape and AXP business interests, including third party service providers, affiliates, and legal entities.

Key responsibilities include:

Assist with the interconnection between core enterprise information security functions and American Express Asia-pacific legal entities
Contribute to the first line information security risk management and reporting
Assess the design and operating effectiveness of information security controls upon which the American Express Asia-pacific legal entities rely to protect Confidentiality, Availability, and Integrity of Information and Systems
Collaborate with General Counsel, Market Compliance, and the American Express Privacy Office to support market regulatory requirements
Lead the information security related aspects of regulatory changes and projects
Identify, scope, and investigate new information security risks, including assisting with assessment of key American Express third-party providers in the region
Deliver leadership reporting and risk metrics that demonstrate the effectiveness of the cyber security program to American Express Asia-pacific legal entities.
Consult on market-specific Business & Technologies projects to ensure appropriate security protection
Craft responses to Information Security audit and examination requirements for the market
Operate as part of the extended Information Security team in support of all security and compliance initiatives
Collaborate with global teams to publish market specific Information Security KPIs/KRIs
Participate in represent regional information security office in APAC risk committees
Participate in meetings with regulatory bodies in Asia Pacific and present Information security posture of American Express

Required Skills:

5-10 years of Information Security experience
Experience working with regulators, such as METI, in complex regulated businesses
Broad understanding of information security disciplines with emphasis on vulnerability management, data protection, infrastructure security, application security, identity and access, incident management and data analytics
Strong in risk management. Ability to link threats to risk tolerance and control effectiveness measurements.
Understanding of cyber regulatory landscape in Asia Pacific Region

Required Work Experience, Education, Certification / Training:

Bachelor’s degree in computer science, information systems, network security or other related field. Master’s degree preferred
Professional certifications (CISSP, CRISC, CISA, PCI, CISM or equivalent)
At least 5 years’ work experience in information security or technology risk management
Technical background with hands-on experience across a variety of technologies
Proficiency in information security, risk management and audit (risk/security policies, procedures and controls)

Required Knowledge, Skills and Abilities:

- Exceptional verbal and written communication skills
- Ability to lead and drive discussions on technical matter with senior business stakeholders along with partners and regulators
- Fluency in English language
- Requires knowledge of a minimum of several business and technical functional capabilities in some of the following areas: security architecture; security engineering; threat management; vulnerability management; electronic discovery; computer and data breach incident management; data protection; forensics; 3rd party/vendor management; security monitoring; cryptography; cloud security; security operations and administration; access management; security policies and standards; security awareness; business continuity; disaster recovery; IT risk management and controls; web security; data security; network security; system security, technology operations and compliance
- Strong knowledge and experience in risk assessment and relevant methodologies including quantitative risk management techniques
- Knowledge of applicable information security standards and regulatory requirements
- Highly self-motivated and directed
- Keen attention to detail

We back you with benefits that support your holistic well-being so you can be and deliver your best. This means caring for you and your loved ones' physical, financial, and mental health, as well as providing the flexibility you need to thrive personally and professionally:

Competitive base salaries
Bonus incentives
Support for financial-well-being and retirement
Comprehensive medical, dental, vision, life insurance, and disability benefits (depending on location)
Flexible working model with hybrid, onsite or virtual arrangements depending on role and business need
Generous paid parental leave policies (depending on your location)
Free access to global on-site wellness centers staffed with nurses and doctors (depending on location)
Free and confidential counseling support through our Healthy Minds program
Career development and training opportunities

American Express is an equal opportunity employer and makes employment decisions without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran status, disability status, age, or any other status protected by law.

Offer of employment with American Express is conditioned upon the successful completion of a background verification check, subject to applicable laws and regulations.

Jobs at Gurgaon

Amazon

Sr. SLP Manager, Security And Loss …

Freshers/Experienced

Gurgaon, Haryana

Manager - Technology Risk & Control Apply Now

Job Description

Jobs at Gurgaon

More Jobs at American Express

Actively Recruiting Companies at Gurgaon, Haryana

Manager - Technology Risk & Control