Senior Manager - Cybersecurity Engineering

At American Express, our culture is built on a 175-year history of innovation, shared values and Leadership Behaviors, and an unwavering commitment to back our customers, communities, and colleagues. As part of Team Amex, you'll experience this powerful backing with comprehensive support for your holistic well-being and many opportunities to learn new skills, develop as a leader, and grow your career.

Here, your voice and ideas matter, your work makes an impact, and together, you will help us define the future of American Express.

How will you make an impact in this role?

• Provides guidance on information security processes, controls, and compliance, and information security risk management to team members 
• Provides day-to-day operational management over functional processes and project delivery 
• Makes difficult, timely decisions regarding simple and complex business or security issues. 
• Facilitates the development of plans and strategies for information security tools, processes, and programs, ensures correct resources are applied to the delivery of projects or processes 
• Implements processes and methods for auditing and addressing non-compliance to information security standards and methodologies; facilitates migration of non-compliant environments to compliant environments 
• Designs reporting products, metrics and information that meet the requirements of stakeholders, and can be actioned to drive significant improvements in the environment and performance 
• Supports partners to achieve targeted levels of information security, project oversight, and controls 
• Supports the investment decision process by developing business cases and cost benefit analyses for new information security solutions using standard methodologies 
• Documents current and desired future state capabilities, incorporating industry leading technologies and regulatory requirements that enhance AXP's ability to handle information security risk and protect data 
• Leads the integration of vendor requirements and tasks, and track and review vendor deliverables 
• Responsible for evaluation of applications, tools and systems 
• Makes strategic recommendations on the implementation of processes, procedures, governance approaches, and compliance matters to enhance information security in alignment with business and Technology strategies and objectives
• People leader to a team of Information Security Analysts & Contractors.
• Drives Team's functional improvements and roadmap and project delivery.

Minimum Qualifications

• Bachelor’s degree in computer science, Information Systems, Business Administration, or other related field preferred (or equivalent work experience) 
• Experience with information security risk management and process improvement 
• Experience working with internal and external auditors, and regulatory examiners 
• Requires knowledge of at least a few information security discipline (e.g. IAM, Infrastructure Security, Security Monitoring etc.)
• Highly developed communication skills
• Excellent time management skills; ability to prioritize and multi-task. 

Preferred Qualifications

• Professional certification preferred (e.g. CISA, CISSP, CISM, CPCB, etc.) 
• Certification may be required for specific functions