PAt American Express, our culture is built on a 175-year history of innovation, shared values and Leadership Behaviors, and an unwavering commitment to back our customers, communities, and colleagues. As part of Team Amex, you'll experience this powerful backing with comprehensive support for your holistic well-being and many opportunities to learn new skills, develop as a leader, and grow your career.brHere, your voice and ideas matter, your work makes an impact, and together, you will help us define the future of American Express.brstrongHow will you make an impact in this role? /strongbrThe Regional Information Security Officer (RISO) organization is responsible for information security control enforcement, incident management, regulatory change, cybersecurity awareness, reporting and enablement for American Express European legal entities.brKey Responsibilities Include:br/pulliSupporting the interconnection between core enterprise technology risk and information security functions and American Express European legal entities. /liliDeliver leadership reporting and risk metrics that demonstrate the effectiveness of the cyber security program to American Express European legal entities. /liliSupport regulatory audit and examinations for Info Sec and Tech functions, including close partnership with the Privacy Office, Compliance, General Council, CRO teams and the broader Information Security organization. /liliSupport on regulatory change management for topics such as DORA, Operational Resilience and EU AI Act. /liliSupport cyber incident management processes. /liliAssess the design effectiveness and operating effectiveness of information security controls upon which the American Express European legal entities rely to protect Confidentiality, Availability, and Integrity of Information and Systems. /liliConsult on EMEA Business Technologies projects to ensure appropriate security protection. /liliOperate as part of the extended Information Security team in support of all security and compliance initiatives.brMaintain EMEA reporting boundaries and operate relevant governance processes. /li /ulbrstrongMinimum Qualifications: /strongbrulliExcellent verbal and written communication skills, including the ability to translate technical concepts into clean business language. /liliProficiency in Italian and English. /liliProven ability to build relationships and work collaboratively in a complex matrix environment. /liliStrong organization and planning skills. /liliAbility to work independently as part of a geographically dispersed team. /liliKnowledge of applicable information security standards and regulatory requirements. /liliKeen attention to detail. /lili5+ years of Information Security or Technology Risk Management experience. /liliExperience working with audits and regulators requirements and in complex, regulated businesses. /liliBroad understanding of information security disciplines /liliExperience in risk assessment and relevant methodologies including quantitative risk management techniques. /liliSecurity-related certifications are desirable. /li /ulbrbQualifications /bbrWe back you with benefits that support your holistic well-being so you can be and deliver your best. This means caring for you and your loved ones' physical, financial, and mental health, as well as providing the flexibility you need to thrive personally and professionally:brulliCompetitive base salaries /liliBonus incentives /liliSupport for financial-well-being and retirement /liliComprehensive medical, dental, vision, life insurance, and disability benefits (depending on location) /liliFlexible working model with hybrid, onsite or virtual arrangements depending on role and business need /liliGenerous paid parental leave policies (depending on your location) /liliFree access to global on-site wellness centers staffed with nurses and doctors (depending on location) /liliFree and confidential counseling support through our Healthy Minds program /liliCareer development and training opportunities /li /ulbrOffer of employment with American Express is conditioned upon the successful completion of a background verification check, subject to applicable laws and regulations. #J-18808-Ljbffr