Senior Associate-CyberOps & Assurance - Third Party Security

Joining Amex Tech means discovering and shaping your contribution to something big. Here, you can work alongside talented tech teams and build a unique career with the Powerful Backing of American Express. With a range of opportunities to work with the latest technologies, and a commitment to back the broader engineering community through open source, our mission is to power your success. Because Amex Tech is powered by our technology, our culture, and our colleagues.
The Technology organization enables and accelerates the company’s growth strategies, delivering global capabilities and services in support of Amex’s customers and colleagues, while maintaining 24/7 servicing and availability to ensure an uninterrupted, high-quality customer experience. Technology provides the foundation for everything we do in the company while driving differentiation through building and leveraging innovative technology and data insights.

At American Express, our mission is to deliver the world’s best customer experience every day. At the heart of this mission is our Information Security organization, enabling exceptional experiences built on a foundation of trust, service, and security. We leverage advanced technologies and data-driven insights to stay ahead of an evolving threat landscape. We foster a culture of passion, curiosity, and courage—empowering you to innovate, grow, and help shape the future of a Fortune 100 company.

Trust. Service. Security.
 

The team is responsible for American Express Third Party security monitoring, outreach, and escalations as part of the Security Overwatch and Third-Party Security (TPS) programs. The team partners and collaborates with Business units, TPS teams, TLM and Third Parties to review security risks and vulnerabilities, drive closure of gaps that are linked to American Express standards, requirements, and best practices, which ultimately supports the reduction of third-party risk and/or exposure to American Express.

In this position the Senior Associate-CyberOps & Assurance - Third Party Security will primarily be responsible for day-to-day third-party continuous monitoring, investigations, third-party outreach and escalations of risks and vulnerabilities impacting our Sentinel classified Third Parties, leveraging threat intelligence data, attack surface management and network monitoring solutions.

Additional responsibilities include:

• Rotational Duty - Research open-source Intel feeds for Cyber threats, risks and vulnerabilities that could have potential impact on our Third Parties and document key Intel in a Daily Threat Report
• Partner & collaborate with the Enterprise Incident Response Program (EIRP) team on any identified third party security incidents or breaches potentially impacting Amex or Amex data.
• Support project activities that drive continuous process/program improvements and enhancements to reduce third party risk to Amex.
  Support annual SOP documentation reviews, updates, additions.
   

• Understanding of the Amex Third Party environment and experience with the TPSO (Third Party Security Overwatch) program and reporting
• Experience with Cyber Attack Surface Management solutions, specifically BitSight and Black Kite.
• Familiarity working with SOAR ticket management solutions such as ServiceNow.
• Familiarity with Threat Intelligence platforms and handling reports based on the Traffic Light Protocol (TLP).
• Working knowledge of Third-Party Lifecycle Management and Process Unity
  Knowledge & understanding of common security controls, detection capabilities, best practices, and solutions for securing digital environments. 
• Knowledge & understanding of cyber security threats, risks, and vulnerabilities.
  Understanding of what information or assets are of value to threat actors and how organizations are breached.
• Must have strong verbal and written communication skills, interpersonal collaborative skills, and the ability to communicate security and risk-related concepts to technical and non-technical audiences.
• Proven problem solver with ability to provide in-depth analysis of complex problems, manage risk and make quick decisions.
• Possess the ability to prioritize work and manage time effectively often with incomplete information.

Employment eligibility to work with American Express in the United States is required as the company will not pursue visa sponsorship for these positions.