Third-Party Security Program Manager

At American Express, our culture is built on a 175-year history of innovation, shared values and Leadership Behaviors, and an unwavering commitment to back our customers, communities, and colleagues. As part of Team Amex, you'll experience this powerful backing with comprehensive support for your holistic well-being and many opportunities to learn new skills, develop as a leader, and grow your career. 

Here, your voice and ideas matter, your work makes an impact, and together, you will help us define the future of American Express. 

Role Overview

American Express relies on a complex ecosystem of third-party service providers to support critical business operations. Ensuring these relationships are governed, risk-managed, and monitored in alignment with enterprise policy and regulatory expectations is central to protecting the company.

The Third-Party Security Program Manager will report directly to the Vice President of Third-Party Security and will support the end-to-end execution of the Third-Party Security program. This role focuses on organizational governance, operational execution, reporting, and leadership enablement.

The Program Manager will partner closely across Technology Risk & Information Security (TRIS), Third-Party Lifecycle Management (TLM), Global Supply Management, Legal, Risk, and Audit teams to support secure onboarding, oversight, governance, and ongoing monitoring of third parties using a standardized, risk-based model.

The successful candidate will be accountable for driving executive reporting, communications, operational cadence, financial management, and special initiatives in support of the Third-Party Security leadership agenda. This position requires a well-organized, action-oriented leader who can balance day-to-day operational priorities with strategic roadmap initiatives, operate effectively in a regulated environment, and support mature, business-critical processes while delivering a strong stakeholder experience.

Responsibilities Include

• Independently manage special projects and activities, and directly manage certain day-to-day issues on behalf of the Vice President of Third-Party Security
• Provide and consolidate inputs for leadership updates on delivery status, risk posture, and key decisions required to support program execution
• Create comprehensive executive-level presentations for senior leadership, risk committees, audit, and regulatory audiences
• Deliver a broad range of communications including Third-Party Security strategy updates, leadership presentations, and colleague communications
• Manage business planning, operational processes, and key achievements (e.g., leadership meeting cadence, program management processes, cost center management, and goal-setting metrics)
• Drive organizational optimization and continuous improvement of Third-Party Security operating and governance processes
• Act as a central point of coordination for urgent third-party risk or operational issues requiring leadership attention
• Balance management of day-to-day business priorities with longer-term strategic deliverables across the Third-Party Security portfolio
• Collaborate with cross-functional partners across Technology, Risk, Legal, Procurement, and Audit to accomplish tasks on behalf of the VP and Third-Party Security leadership
• Mentor and coach team members to support problem-solving, execution discipline, and professional development
• Execute operational risk activities such as conducting assessments with the business, mapping processes, identifying, defining, and testing third-party risk controls
• Engage in and coordinate audit- and exam-related activities, including supporting evidence readiness and alignment to evolving regulatory expectations
• Support planning and operations activities such as annual budget and investme