5+ years of experience in Data Risk Management, Operational Risk, Data Governance, Controls, or a related discipline within financial services/banking, with hands on risk management experience across RCSA (Risk Identification & Assessment), Issue Management, control design/testing, remediation, and risk monitoring.
Proven ability to translate complex business strategies, processes, and technology environments into Data Risk implications, control requirements, and actionable solutions, with strong analytical, problem-solving, and decision-making capabilities.
Demonstrated leadership and influence across cross-functional teams, including Business, Product, Technology, First & Second line Risk & Compliance functions, Audit, and Data organizations, with a proven ability to drive outcomes without direct authority.
Preferred experience
Experience across key Data Risk domains, such as Retention & Deletion/Records Management, Data Sharing Risk, Data Architecture, and enterprise Data Risk frameworks; understanding of relevant data privacy and protection requirements preferred.
Experience with Data Governance, GRC, risk-management, analytics, or reporting tools and applying them to strengthen risk monitoring and governance.
Qualification wording
5+ years of experience in Data Risk Management, Operational Risk, Data Governance, Controls, or a related discipline within financial services/banking, with hands on risk management experience across RCSA (Risk Identification & Assessment), Issue Management, control design/testing, remediation, and risk monitoring.
Proven ability to translate complex business strategies, processes, and technology environments into Data Risk implications, control requirements, and actionable solutions, with strong analytical, problem-solving, and decision-making capabilities.
Demonstrated leadership and influence across cross-functional teams, including Business, Product, Technology, First & Second line Risk & Compliance functions, Audit, and Data organizations, with a proven ability to drive outcomes without direct authority.
Experience across key Data Risk domains, such as Retention & Deletion/Records Management, Data Sharing Risk, Data Architecture, and enterprise Data Risk frameworks; understanding of relevant data privacy and protection requirements preferred.
Experience with Data Governance, GRC, risk-management, analytics, or reporting tools and applying them to strengthen risk monitoring and governance.
Education & alternatives
- Strong executive communication and strategic execution skills, with the ability to synthesize complex risk topics, provide clear recommendations to senior leaders, manage competing priorities, and navigate complex dependencies.
- Enterprise mindset with the ability to connect GCS Risk & Compliance priorities to broader enterprise objectives while balancing stakeholder needs; Bachelor’s degree in a relevant technical, or business discipline.
Preferred Qualifications
Add your resume and we’ll mark which of these tools you already use, and point out anything in the posting that could rule you out.
Google Cloud Storage
Where the posting names them
The Commercial Data Office (CoDO) team, within Global Commercial Services (GCS), is focused on powering the best customer experience and driving value through data. With continuous changes in the regulatory environment and data innovation, CoDO plays a key role in supporting GCS’ sustainable growth balanced with controls and risk management. In partnership with the Enterprise Data Office and across GCS, CoDO is tasked with building new, innovative data solutions for our customers and leading the program for adherence to data regulations and data management best practices.
How will you make an impact in this role?
How will you make an impact in this role?
As the Senior Manager of the Commercial Data Risk Management team, you will lead critical Data Risk Management priorities for GCS and partner with the American Express Enterprise Data Office, GCS Control Management (First Line Risk), Enterprise Business Architecture team, and Business, Product and Technology teams to execute enterprise Data Risk policies and standards. You will translate enterprise requirements into scalable GCS Controls and capabilities, strengthen the control environment, drive remediation of material data risk gaps and issues, and provide risk insights and recommendations to senior leadership. The role requires strong strategic thinking, execution leadership, cross-functional influence, and the ability to operate effectively across complex business and technology environments.
- Drive GCS Data Risk strategy and priorities, translating enterprise policies, standards, architecture, and emerging requirements into practical, scalable risk management capabilities across GCS processes, products, and applications.
As the Senior Manager of the Commercial Data Risk Management team, you will lead critical Data Risk Management priorities for GCS and partner with the American Express Enterprise Data Office, GCS Control Management (First Line Risk), Enterprise Business Architecture team, and Business, Product and Technology teams to execute enterprise Data Risk policies and standards. You will translate enterprise requirements into scalable GCS Controls and capabilities, strengthen the control environment, drive remediation of material data risk gaps and issues, and provide risk insights and recommendations to senior leadership. The role requires strong strategic thinking, execution leadership, cross-functional influence, and the ability to operate effectively across complex business and technology environments.
- Drive GCS Data Risk strategy and priorities, translating enterprise policies, standards, architecture, and emerging requirements into practical, scalable risk management capabilities across GCS processes, products, and applications.
- Lead Data Risk assessment, controls, and RCSA integration, providing senior SME guidance on risk identification, applicability, control design/mapping, ownership, effectiveness, and opportunities to standardize and automate controls.
- Strong executive communication and strategic execution skills, with the ability to synthesize complex risk topics, provide clear recommendations to senior leaders, manage competing priorities, and navigate complex dependencies.
- Enterprise mindset with the ability to connect GCS Risk & Compliance priorities to broader enterprise objectives while balancing stakeholder needs; Bachelor’s degree in a relevant technical, or business discipline.
Preferred Qualifications
Yes. We’ve followed 2 other Senior Manager - Data Governance & Management jobs there since May 2026. 2 came down, usually after about 12 days.
New YorkCame down after 9 days, first seen May 1
New YorkCame down after 14 days, first seen Oct 28
This jobUp 8 days so far, first seen Nov 4
May 1Today
About American Express
People
About 76,800 in 2025, up 2% from the year before.Annual report (SEC Form 10-K)
Company
Listed as AXP.
H-1B visas
55 approved for new hires in fiscal 2025.US Citizenship and Immigration Services
Demand for Data Leadership roles
New Data Leadership postings at the employers we follow are about the same over the last 6 weeks compared with the 6 before.
August 17Last week
Each bar is one week of new postings. The darkest bars are the last 6 weeks.
Counted from the hiring pages we’ve followed for at least five weeks, so employers we add don’t look like growth. Updated weekly.
About the role
We file this job under Data Leadership, by the work the posting describes.
Data leaders run data teams or design how a company's data fits together. Managers hire, set priorities and answer for whether the data work pays off; architects choose the systems and the shape of the data.
Expect years of hands-on data work, experience leading people or projects, and the ability to explain tradeoffs to executives.
Unlike a senior engineer or analyst, most of a data leader's week goes to people, planning and decisions rather than building.
US government figures for computer and information systems managers
Median yearly pay, May 2025
$175,140
Expected change, 2025 to 2035
15.8% more jobsagainst 3.5% for all jobs
The government has no code for data leaders, so these figures are for the closest group, computer and information systems managers, which includes data processing and data operations managers.
The Commercial Data Office (CoDO) team, within Global Commercial Services (GCS), is focused on powering the best customer experience and driving value through data. With continuous changes in the regulatory environment and data innovation, CoDO plays a key role in supporting GCS’ sustainable growth balanced with controls and risk management. In partnership with the Enterprise Data Office and across GCS, CoDO is tasked with building new, innovative data solutions for our customers and leading the program for adherence to data regulations and data management best practices.
How will you make an impact in this role?
As the Senior Manager of the Commercial Data Risk Management team, you will lead critical Data Risk Management priorities for GCS and partner with the American Express Enterprise Data Office, GCS Control Management (First Line Risk), Enterprise Business Architecture team, and Business, Product and Technology teams to execute enterprise Data Risk policies and standards. You will translate enterprise requirements into scalable GCS Controls and capabilities, strengthen the control environment, drive remediation of material data risk gaps and issues, and provide risk insights and recommendations to senior leadership. The role requires strong strategic thinking, execution leadership, cross-functional influence, and the ability to operate effectively across complex business and technology environments.
Drive GCS Data Risk strategy and priorities, translating enterprise policies, standards, architecture, and emerging requirements into practical, scalable risk management capabilities across GCS processes, products, and applications.
Lead Data Risk assessment, controls, and RCSA integration, providing senior SME guidance on risk identification, applicability, control design/mapping, ownership, effectiveness, and opportunities to standardize and automate controls.
Drive sustainable remediation of Data Risk issues and deficiencies, partnering with Issue/Corrective Action Owners, Control Management, Business, Product, and Technology teams to address root causes, strengthen controls, and reduce recurrence.
Lead Retention & Deletion governance and proactive risk monitoring, including risk/control indicators, dashboards, and executive reporting.
Integrate Data Risk with EBCM/Business Architecture, connecting business capabilities to RCSA risks and controls, establishing two-way visibility between EBCM and Data Risk activities, and using capability insights to identify dependencies, gaps, and remediation priorities.
Build strong cross-functional partnerships and Data Risk culture across CoDO, EDO, Risk, Control Management, EBCM, Business, Product, Technology, and Architecture—driving alignment, resolving complex dependencies, and promoting sustainable risk management through leadership engagement, consultation, and awareness.
Minimum Qualifications
5+ years of experience in Data Risk Management, Operational Risk, Data Governance, Controls, or a related discipline within financial services/banking, with hands on risk management experience across RCSA (Risk Identification & Assessment), Issue Management, control design/testing, remediation, and risk monitoring.
Proven ability to translate complex business strategies, processes, and technology environments into Data Risk implications, control requirements, and actionable solutions, with strong analytical, problem-solving, and decision-making capabilities.
Demonstrated leadership and influence across cross-functional teams, including Business, Product, Technology, First & Second line Risk & Compliance functions, Audit, and Data organizations, with a proven ability to drive outcomes without direct authority.
Strong executive communication and strategic execution skills, with the ability to synthesize complex risk topics, provide clear recommendations to senior leaders, manage competing priorities, and navigate complex dependencies.
Enterprise mindset with the ability to connect GCS Risk & Compliance priorities to broader enterprise objectives while balancing stakeholder needs; Bachelor’s degree in a relevant technical, or business discipline.
Preferred Qualifications
Experience across key Data Risk domains, such as Retention & Deletion/Records Management, Data Sharing Risk, Data Architecture, and enterprise Data Risk frameworks; understanding of relevant data privacy and protection requirements preferred.
Experience with Data Governance, GRC, risk-management, analytics, or reporting tools and applying them to strengthen risk monitoring and governance.