Senior Auditor

You Lead the Way. We ve Got Your Back.

At American Express, you ll be recognized for your contributions, leadership, and impact every colleague has the opportunity to share in the company s success. Together, we ll win as a team, striving to uphold our company values and powerful backing promise to provide the world s best customer experience every day. And we ll do it with the utmost integrity, and in an environment where everyone is seen, heard and feels like they belong.

Join Team Amex and lets lead the way together.

About the Internal Audit Group at American Express:

Our Internal Audit Group (IAG) is a worldwide function with 300+ team members and offices across nine countries within American Express. We are committed to growing our audit staff significantly. Our mission is to protect and enhance organizational value by providing independent, objective, risk-based assurance, advisory services and to influence the way the company manages risk.

Our assurance and risk professionals have diverse backgrounds including internal controls, consumer compliance, technology, operational risk, financial accounting, data analytics, and banking operations. Our audit teams align to key risk areas and business units to ensure IAG can provide comprehensive and risk-based audit coverage. In addition, IAG has a Professional Practices group responsible for managing audit operations, quality, and standards; regulatory relations; reporting; training and professional development; and key internal capabilities and technologies.

American Express IAG has reinvented our audit process and is leading the financial services industry with our Data-Driven Continuous Auditing, and Auditor of the Future initiatives. Each uniquely support our Winning Aspiration to be a world class internal audit function that:

• Provides data-driven and technology-enabled assurance
• Delivers timely risk insights that are business-aware and forward-looking
• Supports our colleagues with experiences that prepare them to be enterprise leaders

About the Role:

Our Internal Audit Group is seeking an eager Senior Auditor Technology Audit to help advance and grow our audit coverage across our IT general controls (ITGC) portfolio. In this role, the ideal candidate will focus on technology processes and technology risk management. This opportunity may include supporting Enterprise Projects, Third-Party Risk audit entities, as needed. Additionally, this role will work immediately alongside colleagues that provide coverage over IT Applications, Cybersecurity and Resiliency.

Key Responsibilities include:

• Effective and efficient execution of audit procedures through planning, fieldwork and reporting stages in conformance with professional and department standards, assigned schedule and within budgeted hours.
• Work within an audit team in diverse geographic locations including co-sourced team-members throughout the audit lifecycle of planning
• Engage in continuous learning through department training and self-study on audit methodology, technology processes & controls, stakeholder communication and effective workpaper documentation.
• Contribute to the development of audit analytics that use data to tell the business story, evaluate results and work with audit and business colleagues to synthesize and document findings.
• Participate in and support planning and capture of meetings with management to represent audit objectives, scope, and results, clearly articulating the potential impact of control gaps capturing clarity and accuracy.
• Execute simultaneous global audit projects within the technology, projects or third-party risk domains including support of integrated audits that consider financial, operational and compliance.

Minimum Qualifications

• Bachelor s or equivalent degree in technology, information systems or related field
• Big 4 audit/consulting experience
• 3+ years of experience in technology audit, IT risk management, cybersecurity or related fields including the audit life cycle and professional auditing practices
• Strong verbal and written communication skills that demonstrate an understanding of risks and controls with actionable feedback to audit managers and team leads.
• Effectively works within a team and across teams utilizing project management skills, employing creative thinking, a focus on quality, and the ability to work on competing priorities
• Familiarity with technology frameworks e. g. NIST and experience testing technology control domains
• Drive results with an ability to embrace complex scenarios with curiosity and confidence using process, risk/control knowledge and experience with IA standards, regulatory and financial industry guidance and best practices relevant to business, technology and data implications
• Strong sense of integrity and the ability and willingness to challenge and be challenged.

Preferred Qualifications

• • Experience in a regulated financial services environment
  • Technology or other audit credentials e. g. Certified Information Systems Security Professional (CISSP), Certified Cloud Security Professional (CCSP) Certified Information Systems Auditor (CISA)
  • Experience testing interface inputs, reports, application security, business continuity or third parties
  • Understanding of data analytic tools, data visualization, key risk indicators (KRIs), key performance indicators (KPIs), and scorecards / dashboards

Benefits include:

• Competitive base salaries
• Bonus incentives
• Support for financial-well-being and retirement
• Comprehensive medical, dental, vision, life insurance, and disability benefits (depending on location)
• Flexible working model with hybrid, onsite or virtual arrangements depending on role and business need
• Generous paid parental leave policies (depending on your location)
• Free access to global on-site wellness centers staffed with nurses and doctors (depending on location)
• Free and confidential counseling support through our Healthy Minds program
• Career development and training opportunities