Analyst – Operational Risk Management
American Express — Gurugram, Haryana
₹4–10 LPA (HireSetu estimate) · 0–3 yrs exp · Freshers eligible · Full-time · hybrid · Apply by 4 Nov 2026
HireSetu listing reference 9308e7 — confirm requirements below, then apply on the employer site.
Quick answer: American Express's ORM Independent Monitoring & Testing team in Gurugram hires at 0 to 3 years to test controls that business teams own: Test of Design and Test of Effectiveness, documented, with findings that reach senior management and the Board.
From American Express' job posting
JOB DESCRIPTION
B30 – Analyst, Operational Risk Management (ORM) – Independent Monitoring & Testing
The objective of the Operational Risk Management (ORM) Independent Monitoring & Testing team is to strengthen organizational resilience through independent monitoring and testing activities, establish clear standards for reporting and risk assessments, and provide a holistic view of operational risk through aggregated reporting.
Operational Risk Management is seeking an Analyst for the Independent Monitoring & Testing team, focused on ensuring effective operational risk management is embedded into day-to-day business operations. This role requires extensive collaboration across multiple business units, functional areas, and geographies
RESPONSIBILITIES
The Analyst, Operational Risk Management (ORM), Independent Monitoring & Testing, will:
Support the independent testing and monitoring program based on an annual risk-assessed plan and established testing methodologies
Develop a comprehensive operational risk coverage universe that supports a risk-based annual plan
Independently monitor operational risk trends and activities across the enterprise
Support and execute an effective challenge process based on defined criteria and integrated into the annual plan
Perform Test of Design (ToD) and Test of Effectiveness (ToE) activities and maintain associated control testing documentation
Demonstrate strong knowledge of policies and guidelines related to RCSA, PRCA, Enterprise Risk Management, internal control frameworks, and risk parameters
Possess an understanding of the Issue Management lifecycle, including issue identification, remediation, validation, and closure processes
Manage independent Second Line of Defense (2LoD) testing activities, including integration of methodologies and test plans to address interconnected risks
Coordinate a holistic and de-duplicated independent risk assessment process
Proactively identify high-risk areas requiring intervention or escalation
Support cross-functional Communities of Practice (CoPs) by sharing best practices and helping pioneer new methodologies
Drive reporting related to operational risk topics for the Enterprise Risk Management Committee, Board of Directors, and Senior Management, while providing support and oversight for associated initiatives
Act as a key contributor in sharing insights, themes, and best practices across the enterprise in a proactive manner
QUALIFICATIONS
CA/CS/MBA/B.Tech or Master's degree in Economics or Statistics, or a related field (preferably from a top-tier institute) with 0–3 years of relevant experience.
Strong understanding of critical operational risk management lifecycle & issue management activities
Excellent project management, communication, and interpersonal skills
Experience in process governance and familiarity with policies, regulatory frameworks, and operational standards
Strong analytical and problem-solving capabilities, including the ability to analyze data, identify trends, and evaluate risk scenarios effectively
Experience in control testing, risk assessment, and audit functions
Experience working within any Line of Defense (LoD) framework
Excellent communication skills and proactiveness
Experience in one or more of the following areas is preferred:
Prior experience in Operational Risk Management, Internal Audit, Statutory Audit, Risk Management, or First- or Second-Line Risk functions is preferred.
Translating operational risk strategy and appetite into execution guidelines
Monitoring and identifying breaches in Key Risk Indicator (KRI) thresholds and risk appetite metrics
Supporting implementation of operational risk governance frameworks
Developing and communicating operational risk procedures and standards while ensuring adherence
Supporting operational risk examination and regulatory management processes
As part of Team Amex, you’ll experience our powerful backing with comprehensive support for your holistic well-being and many opportunities to learn new skills, develop as a leader, and grow your career. Here, your voice and ideas matter, your work makes an impact, and together, you will help us define the future of American Express.
We back you with benefits that support your holistic well-being so you can be and deliver your best. This means caring for you and your loved ones' physical, financial, and mental health, as well as providing the flexibility you need to thrive personally and professionally:
Support for financial-well-being and retirement
Comprehensive medical, dental, vision, life insurance, and disability benefits (depending on location)
Flexible working model with hybrid, onsite or virtual arrangements depending on role and business need
Generous paid parental leave policies (depending on your location)
Free access to global on-site wellness centers staffed with nurses and doctors (depending on location)
Free and confidential counseling support through our Healthy Minds program
Career development and training opportunities
The employer’s company overview, benefits, equal-opportunity statement and generic skills tables are left out here; they are on the original posting.
Text from American Express' official job posting, formatted by HireSetu. The employer's own page is the final word on details.
Testing controls other teams own
The work sits in the second line of defense. Business teams own their controls and their RCSA; your team takes a risk-assessed slice each year and checks whether those controls are designed well and actually work. In practice that means reading policies, pulling evidence, running Test of Design and Test of Effectiveness, writing up results and defending them.
The effective challenge line is the part to take seriously. You will sit with people who run the process and tell them the control they signed off does not hold. Comfort with that conversation, and with being wrong sometimes, matters more here than familiarity with any tool.
Degrees are the first filter
The list is wide, CA, CS, MBA, B.Tech, or a master's in economics or statistics, so fresh CAs and MBAs are squarely in the running. What separates candidates is control testing and audit work, since internal audit, statutory audit or a first-line risk role is the background the team prefers.
Lead your CV with anything where you tested someone else's process: an articleship rotation in internal audit at a bank, a statutory audit of a financial services client, a risk project touching KRI thresholds or RCSA documentation. Statistics earns its place twice over, because monitoring risk trends across the enterprise is data work, not just reading policies.
Gurugram, hybrid, plenty of meetings
The role is written as cross-functional and cross-geography. Testing a process means coordinating with owners in other business units, agreeing what evidence you need, then chasing it. With Communities of Practice and reporting into enterprise risk forums on top, a solid share of the week goes to drafting, review and follow-up.
Hybrid in Gurugram means some office days, so ask how the week splits when you reach that stage. Clear writing travels far here: the output of a test is a document a senior reader acts on.
Prepared from American Express' job posting and checked against it before publishing. See our Editorial Policy.
How to apply
- The Apply button opens this job on American Express' careers site (careers.americanexpress.com).
- Its requisition number is 26015615; search for it on the careers site if the link ever stops working.
- Applications close on 4 Nov 2026.
Apply on American Express' site
No fees, ever. HireSetu never charges candidates, and no genuine employer asks for money to apply, interview or join. If anyone asks you to pay, stop and report the job.
Similar openings on HireSetu
- Analyst – Risk Management at Mastercard — Pune — Finance · Full-time
- Associate Consultant – Enterprise Risk Advisory at Genpact — Gurugram — Finance · Full-time
- Consultant – Enterprise Risk Advisory at Genpact — Gurugram — Finance · Full-time
- Risk Analyst - Market Risk at Citco — Telangana — Finance · Full-time
- Associate – Credit Risk at JPMorganChase — Bengaluru — Finance · Full-time
View Analyst – Operational Risk Management on HireSetu · More American Express jobs · Finance jobs · Jobs in Gurugram · Career Insights · FAQ · Companies