Manager, Cybersecurity Operations and Assurance

At American Express, our culture is built on a 175-year history of innovation, shared values and Leadership Behaviors, and an unwavering commitment to back our customers, communities, and colleagues. As part of Team Amex, you'll experience this powerful backing with comprehensive support for your holistic well-being and many opportunities to learn new skills, develop as a leader, and grow your career.

Here, your voice and ideas matter, your work makes an impact, and together, you will help us define the future of American Express.

How will you make an impact in this role?

The Manager, Cybersecurity Operations and Assurance will develop and execute the strategy for Cybersecurity Enterprise Training and assist as necessary in Cybersecurity Awareness activities. The primary focus of this role will be to develop and deliver training and awareness courses and campaigns to promote a strong culture of security and an enhanced mindset of security best practices. Through collaboration, effective communication, and consistent messaging, the successful candidate will ensure our colleagues and contractors continue to uphold our security controls and risk posture of American Express. A successful candidate will be able to collaborate across disciplines, work with subject matter experts (SMEs) across all levels of the Enterprise and have a project focused outlook. A successful candidate will be able to multitask across multiple projects, work in a fast-paced environment, and focus on what is best for Enterprise. This position will report to the Director of Cybersecurity Training, Awareness, and Industry Partnerships within the Technology Risk & Information Security (TRIS) organization. 

Key responsibilities include:

• Manage and mature a comprehensive Cybersecurity Training curriculum that meets regulatory requirements, while focusing on training that makes sense.

• Design and deliver comprehensive Cybersecurity Training the Enterprise

• Drive value through partnerships with Technology Communications, TRIS SMEs and other key stakeholders to influence and enhance the TRIS brand and serve as a security champion for Enterprise.

• Research current technology and security resources to understand capabilities that can be utilized to support enhanced awareness, growth, and development.

• Manage the design and delivery of instructional material, such as presentations, security campaigns, and other customized training sessions to drive education and awareness of security topics.

• Prepare materials (reports, presentations, spreadsheets, etc.) on information security to help develop training and to enable informed decision-making.

• Conduct learning needs assessments and identify requirements to enhance the security awareness program and training curriculum.

• Identify and deliver against learning objectives for each aspect of the program.

• Document each aspect of the training program to ensure consistency and repeatability in delivery.

• Mature processes to ensure repeatability, consistency, and efficiency across the program.

• Conduct periodic reviews/revisions of course content for accuracy, completeness, alignment, and relevance.

• Managing relationship with third party training partner

Minimum Qualifications: 

• 10+ years of Cybersecurity, Training, and/or Education experience. 

• Bachelor’s degree

• Knowledge and understanding of secu