Mgr-Program Mgmt

The Manager, Regulatory Engagement and Governance is responsible for managing regulatory examinations, assessments, inquiries, and related oversight activities impacting Digital Workplace Technology.

This role serves as the central coordination point between Digital Workplace Technology, Risk and Compliance, internal subject matter experts, and enterprise regulatory engagement teams. The Manager ensures regulatory requests are understood, appropriately assigned, supported by complete and accurate evidence, and delivered within required timelines.

The role also provides proactive regulatory readiness by identifying recurring themes, strengthening documentation and controls, and helping leadership understand emerging areas of regulatory exposure.

At American Express, our culture is built on a 175-year history of innovation, shared values and Leadership Behaviors, and an unwavering commitment to back our customers, communities, and colleagues. From delivering differentiated products to providing world-class customer service, we operate with a strong risk mindset, ensuring we continue to uphold our brand promise of trust, security, and service.

As part of Team Amex, you'll experience our powerful backing with comprehensive support for your holistic well-being and many opportunities to learn new skills, develop as a leader, and grow your career. Here, your voice and ideas matter, your work makes an impact, and together, you will help us define the future of American Express.

Required Qualifications

• Bachelor's degree in Business, Risk Management, Technology, Finance, or a related field, or equivalent professional experience.
• Experience in regulatory engagement, technology risk, operational risk, compliance, audit, control management, or governance within a regulated organization.
• Strong understanding of risk and control concepts and the ability to evaluate whether documentation and evidence adequately demonstrate control execution.
• Experience coordinating complex initiatives involving multiple senior stakeholders and competing deadlines.
• Strong written and verbal communication skills, including experience preparing executive level materials.
• Ability to analyze complex regulatory requests and translate them into clear deliverables and accountable actions.
• Strong judgment with the ability to identify when an issue requires escalation.
• Excellent organizational, documentation, and program management capabilities.

Preferred Qualifications

• Experience supporting regulatory examinations within a large financial institution or other highly regulated organization.
• Knowledge of technology risk management, cybersecurity, resilience, identity and access management, data governance, third party risk, or workplace technology.
• Experience working with risk and control self assessments, internal controls, regulatory remediation, audit findings, and issue management.
• Experience interacting with senior executives, enterprise risk functions, internal audit, legal teams, and regulatory engagement organizations.

Depending on factors such as business unit requirements, the nature of the position, cost and applicable laws, American Express may provide visa sponsorship for certain positions

Regulatory Engagement Management

• Manage regulatory engagements from initial notification through closure, including examinations, assessments, information requests, and follow-up activities.
• Review regulatory requests to understand scope, intent, applicable technology processes, and potential areas of risk.
• Develop and maintain engagement plans, timelines, request trackers, ownership, dependencies, and escalation paths.
• Coordinate responses across Digital Workplace Technology teams and enterprise partners.
• Serve as the primary Digital Workplace Technology point of contact for regulatory engagement activities.

Evidence and Response Management

• Coordinate the collection, review, and submission of documentation and evidence supporting regulatory requests.
• Assess evidence for completeness, accuracy, consistency, and alignment with the regulatory request before submission.
• Challenge unclear, incomplete, or unsupported responses and work with subject matter experts to strengthen the response.
• Maintain traceability between regulatory requests, responses, supporting evidence, controls, policies, procedures, and accountable owners.
• Ensure regulatory submissions meet established quality and governance standards.

Leadership and Examination Readiness

• Prepare leaders and subject matter experts for regulatory meetings, interviews, walkthroughs, and examinations.
• Develop executive briefing materials summarizing engagement scope, areas of focus, key risks, open requests, emerging concerns, and required decisions.
• Conduct readiness reviews before regulatory discussions to ensure responses and supporting documentation are consistent.
• Identify areas where the organization may have documentation, control, process, or evidence gaps before they become regulatory concerns.

Risk and Issue Management

• Identify potential regulatory risks, control weaknesses, or recurring themes identified during engagements.
• Partner with Risk and Compliance, Control Management, Legal, and technology teams to determine appropriate remediation.
• Track regulatory commitments, findings, observations, and remediation activities through closure.
• Escalate emerging risks, missed commitments, evidence concerns, or significant regulatory matters to leadership.
• Ensure completed remediation is supported by sufficient evidence and sustainable control practices.

Regulatory Governance and Reporting

• Maintain a centralized view of regulatory engagements affecting Digital Workplace Technology.
• Provide regular reporting on engagement status, outstanding requests, risks, findings, commitments, and upcoming regulatory activity.
• Analyze regulatory engagement trends to identify recurring areas of concern and opportunities to strengthen the control environment.
• Maintain engagement records and supporting documentation in accordance with enterprise recordkeeping requirements.
• Support improvements to regulatory engagement processes, procedures, templates, and governance standards.

Cross Functional Partnership

• Partner with technology leaders, engineers, product teams, Risk and Compliance, Internal Audit, Legal, Privacy, Information Security, Operational Risk, and other oversight functions.
• Translate regulatory requirements and requests into clear actions for technology teams.
• Facilitate discussions across multiple organizations when regulatory requests involve interconnected processes or controls.
• Build strong working relationships with enterprise regulatory engagement teams and other second and third line partners.

What Success Looks Like

• Regulatory engagements are managed with clear ownership, disciplined execution, and minimal last minute escalation.
• Regulatory requests are answered accurately, consistently, and supported by defensible evidence.
• Leadership has early visibility into regulatory risks, concerns, and required decisions.
• Potential control or documentation gaps are identified before they become regulatory findings.
• Regulatory commitments and remediation activities are tracked through sustainable closure.
• Recurring regulatory themes are translated into improvements across the Digital Workplace Technology control environment.