Senior Manager - Cybersecurity Operations & Assurance

Joining Amex Tech means discovering and shaping your contribution to something big. Here, you can work alongside talented tech teams and build a unique career with the Powerful Backing of American Express. With a range of opportunities to work with the latest technologies, and a commitment to back the broader engineering community through open source, our mission is to power your success. Because Amex Tech is powered by our technology, our culture, and our colleagues.

The Technology organization enables and accelerates the company’s growth strategies, delivering global capabilities and services in support of Amex’s customers and colleagues, while maintaining 24/7 servicing and availability to ensure an uninterrupted, high-quality customer experience. Technology provides the foundation for everything we do in the company while driving differentiation through building and leveraging innovative technology and data insights.

  

How will you make an impact in this role?

This is a program management role that reports to the VP of Cybersecurity, IT Asset Management& ITSM Platform/Director Cybersecurity Engineering - Program Management and is responsible for driving execution and delivery of enterprise-scale security initiatives across the organization. The Program Manager will operate at the intersection of business and technology, translating strategic objectives into coordinated execution plans and measurable outcomes.

This individual will lead complex programs ensuring alignment across multiple engineering and security teams, focusing on the IT Asset Management and IT Service Management enterprise platforms.  With a product-oriented mindset, they will apply agile principles to orchestrate delivery, maintain roadmap transparency, and drive operational excellence across the portfolio.

 Skills:

• Strong program and project management expertise within cybersecurity or technology organizations.
• Ability to translate complex technical initiatives into business-aligned outcomes and measurable deliverables.
• Experience operating in agile environments, with the ability to adapt frameworks to suit different types of work (operational vs. strategic).
• Proven ability to manage dependencies and coordinate across multiple teams in a matrixed organization.
• Strong stakeholder management and communication skills, including executive-level reporting.
• Product-oriented mindset with a focus on value delivery, customer impact, and continuous improvement.
• Ability to define KPIs, OKRs, and success metrics for platform adoption and operational excellence.
• Familiarity with audit and compliance processes within a security context.
• Familiarity with asset management lifecycle, including hardware, software, SaaS, and cloud assets, asset discovery, and CMDB governance.

 

• Responsible for structuring and driving a colleague engagement framework focused on team cohesion within the Information Security organization (India) in partnership with the office of the CISO
• Manage and track large-scale cybersecurity programs, ensuring delivery against defined scope, timelines, and strategic objectives.
• Translate business and security requirements into actionable technical deliverables in partnership with engineering teams.
• Act as a central point of coordination across multiple teams, driving alignment, dependency management, and risk mitigation.
• Apply agile methodologies (Scrum, Kanban, or hybrid approaches) based on program needs to optimize delivery and responsiveness.
• Partner with Cybersecurity Directors to define, track, and report on strategic outcomes for IT Asset Management and Service Platform.
• Develop and maintain program-level roadmaps, ensuring visibility into priorities, milestones, and progress across key security domains.
• Establish and monitor program metrics to track execution health, delivery performance, and business impact.
• Facilitate stakeholder communication, including regular status updates, executive reporting, and cross-functional engagement.
• Support audit, risk, and compliance activities by ensuring proper documentation, traceability, and control alignment.

• Bachelor’s degree in Information technology, Information Security, Business, or a related field.
• 10+ years of experience in Information Security Program Management roles.
• Demonstrated experience managing enterprise-scale security or infrastructure programs.
• Experience working in or closely with cybersecurity engineering teams.
• Background in infrastructure delivery (e.g., networking, identity and access management, or related domains) preferred.
• Experience in agile delivery models and large-scale program coordination (e.g., release train or similar constructs).