Mgr-Program Mgmt at American Express in New York, NY

  • Company: American Express
  • Location: New York, NY, United States
  • Job type: full time
  • Workplace: onsite
  • Posted: 2026-10-12

Apply for this role

All open roles at American Express

Job description

The Manager, Regulatory Engagement and Governance is responsible for managing regulatory examinations, assessments, inquiries, and related oversight activities impacting Digital Workplace Technology. This role serves as the central coordination point between Digital Workplace Technology, Risk and Compliance, internal subject matter experts, and enterprise regulatory engagement teams. The Manager ensures regulatory requests are understood, appropriately assigned, supported by complete and accurate evidence, and delivered within required timelines. The role also provides proactive regulatory readiness by identifying recurring themes, strengthening documentation and controls, and helping leadership understand emerging areas of regulatory exposure. Regulatory Engagement Management Manage regulatory engagements from initial notification through closure, including examinations, assessments, information requests, and follow-up activities. Review regulatory requests to understand scope, intent, applicable technology processes, and potential areas of risk. Develop and maintain engagement plans, timelines, request trackers, ownership, dependencies, and escalation paths. Coordinate responses across Digital Workplace Technology teams and enterprise partners. Serve as the primary Digital Workplace Technology point of contact for regulatory engagement activities. Evidence and Response Management Coordinate the collection, review, and submission of documentation and evidence supporting regulatory requests. Assess evidence for completeness, accuracy, consistency, and alignment with the regulatory request before submission. Challenge unclear, incomplete, or unsupported responses and work with subject matter experts to strengthen the response. Maintain traceability between regulatory requests, responses, supporting evidence, controls, policies, procedures, and accountable owners. Ensure regulatory submissions meet established quality and governance standards. Leadership and Examination Readiness Prepare leaders and subject matter experts for regulatory meetings, interviews, walkthroughs, and examinations. Develop executive briefing materials summarizing engagement scope, areas of focus, key risks, open requests, emerging concerns, and required decisions. Conduct readiness reviews before regulatory discussions to ensure responses and supporting documentation are consistent. Identify areas where the organization may have documentation, control, process, or evidence gaps before they become regulatory concerns. Risk and Issue Management Identify potential regulatory risks, control weaknesses, or recurring themes identified during engagements. Partner with Risk and Compliance, Control Management, Legal, and technology teams to determine appropriate remediation. Track regulatory commitments, findings, observations, and remediation activities through closure. Escalate emerging risks, missed commitments, evidence concerns, or significant regulatory matters to leadership. Ensure completed remediation is supported by sufficient evidence and sustainable control practices. Regulatory Governance and Reporting Maintain a centralized view of regulatory engagements affecting Digital Workplace Technology. Provide regular reporting on engagement status, outstanding requests, risks, findings, commitments, and upcoming regulatory activity. Analyze regulatory engagement trends to identify recurring areas of concern and opportunities to strengthen the control environment. Maintain engagement records and supporting documentation in accordance with enterprise recordkeeping requirements. Support improvements to regulatory engagement processes, procedures, templates, and governance standards. Cross Functional Partnership Partner with technology leaders, engineers, product teams, Risk and Compliance, Internal Audit, Legal, Privacy, Information Security, Operational Risk, and other oversight functions. Translate regulatory requirements and requests into clear actions for

Mgr-Program Mgmt on JobPost.