Manager - Third Party Risk Management, Alternate Practice

At American Express, our culture is built on a 175-year history of innovation, shared values and Leadership Behaviors, and an unwavering commitment to back our customers, communities, and colleagues. As part of Team Amex, you'll experience this powerful backing with comprehensive support for your holistic well-being and many opportunities to learn new skills, develop as a leader, and grow your career.

Here, your voice and ideas matter, your work makes an impact, and together, you will help us define the future of American Express.

As part of Enterprise Shared Services (ESS), the Global Supply Management (GSM) organization works with American Express business partners to identify the right third parties to support their strategic business objectives, negotiate supplier contracts and protect the company from third-party risk. GSM’s vision is to offer outstanding procurement, third-party risk management, and partner payment services to American Express colleagues.

The Manager of Alternate Practice within GSM will be responsible for supporting the Alternate Practice Third Party Risk Program, including defining requirements and standards applicable to the use of external third parties that are designated as Alternate Practice in adherence to the company’s third-party management policy.  The role is also responsible for supporting Business Units in managing risk of Alternate Practice third parties, including reviewing and approving vendor creation and updates, gap closure documentation, completed risk assessments of third-party engagements, and management plans, reviewing and updating program documentation, including the Alternate Practice Standards, Guidance documents, training documents, and category inquiries/requests. In addition, this position will play an integral role in facilitating the migration into Process Unity for third parties managed via Alternate Practice.

This position engages with a diverse and large set of stakeholders across the company, including independent risk management, internal audit, and Risk SMEs to drive continuous improvement of the Third-Party Risk Management Program (TPRM) program.  Additional stakeholders include operational teams within GSM and AXP Business Units that own third-party relationships in scope for the program.

Key Responsibilities of this role:

• Contributing to and maintaining a global strategy, methodology, process, and governance framework for the Alternate Practice Third Party Risk Program.
• Liaison with Risk SMEs to define standards for effective risk management across the third-party lifecycle including risk assessment questions, risk scoring logic, due diligence requirements, and ongoing monitoring expectations.
• Maintain internal standards and related guidance for first-line Alternate Practice third-party risk management.
• Identify emerging risks and define necessary TPRM program changes to address the risk. 
• Review effectiveness of risk management processes and capabilities.
• Promote effective teamwork with supporting functional areas, Risk SMEs, and business units.

Minimum requirements: 

• Previous experience in a risk/control related field is required. E.g., Third-Party Risk Management, Operational Risk Management, Compliance, or Audit.
• Strong Strategic Thinker: Ability to understand industry trends and TPRM best practices; anticipates emerging risks that have impact on the TPRM program.
• Effective Influencer: Effectively manages a large and diverse set of internal and external stakeholders across AXP business units and the three lines of defense.
• Clear Communicator: Comfortable communicating at multiple levels of the organizati