Senior Analyst – Risk Management | American Express Careers

Senior Analyst - Risk Management

Gurugram, HR, India (Hybrid)

Apply Now

---

Job Description

Global Controllership is a segment of American Express Finance and partners with all business units and staff groups across the Company to ensure financial integrity, a strong control environment, and enhanced shareholder value by delivering financial accounting, reporting, compliance, planning, and advisory services.

This is an Analyst position in the Global Controllership organization, responsible for supporting the Sarbanes-Oxley (SOX) program across American Express in addition to compliance with the Company’s Operational Risk framework for the Finance organization.

Reporting to the Manager of SOX Assurance, the successful candidate will be responsible for testing, monitoring, and optimization of internal controls over financial and regulatory reporting including associated Information Technology (IT) systems. The individual should possess excellent communication, presentation, and stakeholder management skills.

Responsibilities

• Validate design and operating effectiveness of SOX controls through testing, across all Business Units (BUs) to support Control Owners / Process Owners in quarterly SOX certification process.
• IT control testing including interface inputs, key reports, applications, business continuity, and third parties.
• Collaborate with key stakeholders including Business Process teams, BU Control Management, Operational Risk Management, Internal Audit, etc., for quarterly SOX testing and reporting.
• Perform year-end control testing to support our external auditors, PwC, for their annual SOX audit.
• Partner closely with internal stakeholders and external auditors to resolve testing-related observations/queries.
• Drive enhancements in control environment by identifying improvement opportunities to SOX Controls.
• Demonstrate a high degree of organization, individual initiative, results and solution-oriented approach, personal accountability, and resiliency.
• Exemplify strength in the American Express Leadership Model: set the agenda, bring others with you, and do it the right way.

Qualifications

• CA / CPA / MBA (Finance) or equivalent with 4+ years of relevant post-qualification experience in SOX compliance, Internal Audit, or similar roles. Big 4 experience preferred.
• Professional qualifications like Certified Information Systems Auditor (CISA) preferred.
• In-depth understanding of Risk and Control environment.
• Knowledge of the Sarbanes-Oxley Act including SOX 302 / 404 and Internal Controls Over Financial Reporting (ICOFR).
• Understanding of testing methodology, controls/test procedures interpretation, and concluding on testing results.
• Demonstrated ability to effectively collaborate and influence business partners to achieve the team’s objectives.
• Excellent communication skills, both written and verbal, with the ability to clearly and concisely articulate issues in a timely and effective manner.

Job Details

Job ID: 26013770

Category: Risk / Analytics & Risk Management

Posting Date: 16/09/2026

Apply Before: 25/09/2026, 09:30

Location: AMEX Bldg No 5, Tower B & C, 11th Floor, Gurgaon, HR, 122002, IN (Hybrid)

---

Past Interview Questions for this Role (Amex - SOX / Risk Management)

Below are detailed questions frequently asked in past interview rounds for SOX, Risk Management, and Controllership roles at American Express:

1. Technical & SOX / Internal Control Questions

1. What is the core difference between SOX Section 302 and SOX Section 404 compliance?
2. How do you perform a end-to-end walkthrough of a financial process to identify key risk points and control gaps?
3. When testing Information Technology General Controls (ITGC) and Application Controls, how do you validate the integrity of system-generated reports (IPE/IPEF)?
4. If you identify a deficiency during SOX testing, how do you evaluate whether it is a Control Deficiency, a Significant Deficiency, or a Material Weakness?
5. How do you coordinate with external auditors (e.g., PwC) when they disagree with your control testing outcome or evaluation of a deficiency?
6. What approach do you use for testing Automated Controls versus Manual Controls? How does sampling methodology differ between them?

2. Scenario-Based & Process Management Questions

1. If a business process owner delays submitting their quarterly SOX evidence, risking your compliance deadline, how do you handle the situation?
2. Can you share an instance where you identified an opportunity to optimize or streamline a redundant SOX control without increasing operational risk?
3. How do you ensure proper Segregation of Duties (SoD) when evaluating access management controls within finance applications?
4. How do you stay updated on changes in regulatory requirements or PCAOB guidance that might affect financial reporting controls?

3. Behavioral & Amex Leadership Model Questions

1. Why do you want to join American Express, specifically within the Global Controllership team?
2. How do you align your daily tasks with the American Express leadership principle: "Set the agenda, bring others with you, and do it the right way"?
3. Describe a time when you had to communicate a critical risk or audit finding to senior stakeholders who were resistant to making changes. How did you persuade them?
4. Give an example of a time when you had to manage tight deadlines across multiple business units during a quarterly closing or audit cycle. How did you prioritize?

Apply for this Role