Introduction to American Express and Our Internal Audit Group
At American Express, we believe in the power of progress and the importance of backing our customers, communities, and each other. As a global and diverse community of colleagues, we are committed to upholding our company values and providing the world's best customer experience every day. Our Internal Audit Group (IAG) is at the forefront of this mission, leading the financial services industry with our innovative Audit NextGen, Data-Driven Continuous Auditing, and Auditor of the Future initiatives. We are seeking a talented and passionate IT Audit Manager to join our team and contribute to our mission of protecting and enhancing organizational value through independent, objective, risk-based assurance and advisory services.
About the Role and Our Team
We are looking for an experienced IT Audit Manager to lead the way in our technology risk management and audit portfolio. As a key member of our team, you will perform audits to evaluate our Chief Technology Office (CTO) function, technology risk management, and related processes against regulatory requirements and industry best practices. Our audit team is heavily focused on utilizing a data-driven auditing approach, and we are seeking someone who is passionate about leveraging data and technology to drive business insights and risk management. You will have the opportunity to work with a talented team of professionals who share your passion for technology and audit, and to contribute to the development of our audit methodology and technology enablers.
Key Responsibilities and Expectations
- Participate as a key team member on audit projects, assisting with annual planning and owning core audit tasks, complex areas, and challenging workloads on successive assignments
- Collaborate with audit teams to understand the data behind key processes, risk, and controls, and to develop analytic control tests and analyze and interpret their results
- Utilize automated work papers, analytics, and other department and company tools to ensure effective and efficient execution of audits in conformance with professional and department standards, budgets, and timelines
- Present audit objectives, scope, and results to senior management, clearly articulating the potential impact of control gaps in a highly professional and proficient manner
- Evaluate results, synthesize audit findings across the project, draft audit reports, and ensure effective and efficient audit execution
- Validate that actions taken by management to address findings are appropriate and document the results
- Maintain audit proficiency through ongoing professional development, including data literacy skills
- Proactively lead audit execution, supervise and mentor junior staff, review their workpapers, and escalate issues as needed
- Monitor a portfolio of audit analytics, assess analytic results, use the analytic data to tell the potential business story, and work with audit and business colleagues to validate that story
- Assist team leaders, senior auditors, and staff auditors in accomplishing team objectives and producing results
- Lead multiple simultaneous audit projects of all sizes and complexity across multiple business areas within and outside of local region, in unfamiliar areas, and for different audit leaders
- Effectively coach, teach, mentor, and develop junior colleagues and co-sourced resources in geographically diverse locations across all aspects of their role, the audit and analytic lifecycle, and audit methodology
Essential and Preferred Qualifications
To be successful in this role, you will need to have a strong foundation in technology risk management and audit, as well as excellent communication and leadership skills. The essential qualifications for this role include:
- 3+ years of experience in assessing/auditing technology risk management or CTO functions, such as enterprise architecture, technology resilience, employee digital workplace, API management, application development, and IT asset management
- BA or BS in Information Systems, Computer Science, Accounting, Finance, Business, or a related field
- Understanding of emerging technologies and their impact on control practices
- Ability to clearly articulate risk insights to stakeholders
- Familiarity with FFIEC IT Handbooks and NIST CSF
- Strong written and verbal communication skills that deliver high-quality, actionable, and value-added feedback to management on potential control issues and potential solutions to close gaps
- Professional Certification (CIA, CISA, CPA, or equivalent) expected to be obtained within 12 months of employment
The preferred qualifications for this role include:
- 5+ years of experience in assessing/auditing technology risk management or CTO functions
- Technical Cybersecurity certification (CISSP, CCSP, CEH, etc.)
- Experience with using data analytic tools, data visualization, key risk indicators (KRIs), key performance indicators (KPIs), and scorecards/dashboards
- Experience evaluating cybersecurity risks and concepts
- Experience with large financial institutions (i.e., G-SIB, Category III/II bank)
- Proven ability to lead team members in a way that encourages, develops, and delivers results
Skills and Competencies Required for Success
To be successful in this role, you will need to have a strong foundation in technology risk management and audit, as well as excellent communication and leadership skills. The key skills and competencies required for this role include:
- Strong technical skills, including experience with data analytic tools and technologies
- Excellent communication and presentation skills, with the ability to articulate complex technical concepts to non-technical stakeholders
- Strong leadership and management skills, with the ability to lead and motivate teams of professionals
- Ability to work in a fast-paced environment, with multiple priorities and deadlines
- Strong analytical and problem-solving skills, with the ability to analyze complex data sets and identify trends and insights
- Ability to work collaboratively with stakeholders across the organization, including technology, risk, and business teams
Career Growth Opportunities and Learning Benefits
At American Express, we are committed to the growth and development of our colleagues. As an IT Audit Manager, you will have access to a range of career growth opportunities and learning benefits, including:
- Professional development opportunities, including training and certification programs
- Leadership development programs, including mentoring and coaching
- Opportunities to work on high-visibility projects and initiatives, including technology risk management and audit
- Access to a range of networking opportunities, including industry conferences and events
- Opportunities to work with a talented team of professionals who share your passion for technology and audit
Work Environment and Company Culture
At American Express, we are committed to creating a work environment that is inclusive, diverse, and supportive of all colleagues. Our company culture is built on a foundation of respect, empathy, and trust, and we are committed to providing a workplace that is free from discrimination and harassment. As an IT Audit Manager, you will be part of a dynamic and innovative team that is passionate about technology and audit, and you will have the opportunity to contribute to the development of our audit methodology and technology enablers.
Compensation, Perks, and Benefits
At American Express, we offer a competitive compensation package, including a salary range of $90,000 to $165,000 per year, plus bonus and benefits. Our benefits package includes:
- Competitive base salaries
- Bonus incentives
- 6% Company Match on retirement savings plan
- Free financial coaching and financial well-being support
- Comprehensive medical, dental, vision, life insurance, and disability benefits
- Flexible working model with hybrid, onsite, or virtual arrangements depending on role and business need
- 20+ weeks paid parental leave for all parents, regardless of gender, offered for pregnancy, adoption, or surrogacy
- Free access to global on-site wellness centers staffed with nurses and doctors (depending on location)
- Free and confidential counseling support through our Healthy Minds program
- Career development and training opportunities
Conclusion and Call to Action
If you are a motivated and experienced IT Audit Manager who is passionate about technology and audit, we encourage you to apply for this exciting opportunity. As a member of our team, you will have the opportunity to contribute to the development of our audit methodology and technology enablers, and to work with a talented team of professionals who share your passion for technology and audit. Don't miss out on this opportunity to join a dynamic and innovative team and to take your career to the next level. Apply now to become an IT Audit Manager at American Express!
Apply Now