Analyst – Operational Risk Management

American Express — Gurugram, Haryana

₹4–10 LPA (HireSetu estimate) · 0–3 yrs exp · Freshers eligible · Full-time · hybrid · Apply by 4 Nov 2026

HireSetu listing reference 9308e7 — confirm requirements below, then apply on the employer site.

Quick answer: American Express's ORM Independent Monitoring & Testing team in Gurugram hires at 0 to 3 years to test controls that business teams own: Test of Design and Test of Effectiveness, documented, with findings that reach senior management and the Board.

From American Express' job posting

JOB DESCRIPTION

B30 – Analyst, Operational Risk Management (ORM) – Independent Monitoring & Testing

The objective of the Operational Risk Management (ORM) Independent Monitoring & Testing team is to strengthen organizational resilience through independent monitoring and testing activities, establish clear standards for reporting and risk assessments, and provide a holistic view of operational risk through aggregated reporting.

Operational Risk Management is seeking an Analyst for the Independent Monitoring & Testing team, focused on ensuring effective operational risk management is embedded into day-to-day business operations. This role requires extensive collaboration across multiple business units, functional areas, and geographies

RESPONSIBILITIES

The Analyst, Operational Risk Management (ORM), Independent Monitoring & Testing, will:

Support the independent testing and monitoring program based on an annual risk-assessed plan and established testing methodologies

Develop a comprehensive operational risk coverage universe that supports a risk-based annual plan

Independently monitor operational risk trends and activities across the enterprise

Support and execute an effective challenge process based on defined criteria and integrated into the annual plan

Perform Test of Design (ToD) and Test of Effectiveness (ToE) activities and maintain associated control testing documentation

Demonstrate strong knowledge of policies and guidelines related to RCSA, PRCA, Enterprise Risk Management, internal control frameworks, and risk parameters

Possess an understanding of the Issue Management lifecycle, including issue identification, remediation, validation, and closure processes

Manage independent Second Line of Defense (2LoD) testing activities, including integration of methodologies and test plans to address interconnected risks

Coordinate a holistic and de-duplicated independent risk assessment process

Proactively identify high-risk areas requiring intervention or escalation

Support cross-functional Communities of Practice (CoPs) by sharing best practices and helping pioneer new methodologies

Drive reporting related to operational risk topics for the Enterprise Risk Management Committee, Board of Directors, and Senior Management, while providing support and oversight for associated initiatives

Act as a key contributor in sharing insights, themes, and best practices across the enterprise in a proactive manner

QUALIFICATIONS

CA/CS/MBA/B.Tech or Master's degree in Economics or Statistics, or a related field (preferably from a top-tier institute) with 0–3 years of relevant experience.

Strong understanding of critical operational risk management lifecycle & issue management activities

Excellent project management, communication, and interpersonal skills

Experience in process governance and familiarity with policies, regulatory frameworks, and operational standards

Strong analytical and problem-solving capabilities, including the ability to analyze data, identify trends, and evaluate risk scenarios effectively

Experience in control testing, risk assessment, and audit functions

Experience working within any Line of Defense (LoD) framework

Excellent communication skills and proactiveness

Experience in one or more of the following areas is preferred:

Prior experience in Operational Risk Management, Internal Audit, Statutory Audit, Risk Management, or First- or Second-Line Risk functions is preferred.

Translating operational risk strategy and appetite into execution guidelines

Monitoring and identifying breaches in Key Risk Indicator (KRI) thresholds and risk appetite metrics

Supporting implementation of operational risk governance frameworks

Developing and communicating operational risk procedures and standards while ensuring adherence

Supporting operational risk examination and regulatory management processes

As part of Team Amex, you’ll experience our powerful backing with comprehensive support for your holistic well-being and many opportunities to learn new skills, develop as a leader, and grow your career. Here, your voice and ideas matter, your work makes an impact, and together, you will help us define the future of American Express.

We back you with benefits that support your holistic well-being so you can be and deliver your best. This means caring for you and your loved ones' physical, financial, and mental health, as well as providing the flexibility you need to thrive personally and professionally:

Support for financial-well-being and retirement

Comprehensive medical, dental, vision, life insurance, and disability benefits (depending on location)

Flexible working model with hybrid, onsite or virtual arrangements depending on role and business need

Generous paid parental leave policies (depending on your location)

Free access to global on-site wellness centers staffed with nurses and doctors (depending on location)

Free and confidential counseling support through our Healthy Minds program

Career development and training opportunities

The employer’s company overview, benefits, equal-opportunity statement and generic skills tables are left out here; they are on the original posting.

Text from American Express' official job posting, formatted by HireSetu. The employer's own page is the final word on details.

Testing controls other teams own

The work sits in the second line of defense. Business teams own their controls and their RCSA; your team takes a risk-assessed slice each year and checks whether those controls are designed well and actually work. In practice that means reading policies, pulling evidence, running Test of Design and Test of Effectiveness, writing up results and defending them.

The effective challenge line is the part to take seriously. You will sit with people who run the process and tell them the control they signed off does not hold. Comfort with that conversation, and with being wrong sometimes, matters more here than familiarity with any tool.

Degrees are the first filter

The list is wide, CA, CS, MBA, B.Tech, or a master's in economics or statistics, so fresh CAs and MBAs are squarely in the running. What separates candidates is control testing and audit work, since internal audit, statutory audit or a first-line risk role is the background the team prefers.

Lead your CV with anything where you tested someone else's process: an articleship rotation in internal audit at a bank, a statutory audit of a financial services client, a risk project touching KRI thresholds or RCSA documentation. Statistics earns its place twice over, because monitoring risk trends across the enterprise is data work, not just reading policies.

Gurugram, hybrid, plenty of meetings

The role is written as cross-functional and cross-geography. Testing a process means coordinating with owners in other business units, agreeing what evidence you need, then chasing it. With Communities of Practice and reporting into enterprise risk forums on top, a solid share of the week goes to drafting, review and follow-up.

Hybrid in Gurugram means some office days, so ask how the week splits when you reach that stage. Clear writing travels far here: the output of a test is a document a senior reader acts on.

Prepared from American Express' job posting and checked against it before publishing. See our Editorial Policy.

How to apply

  1. The Apply button opens this job on American Express' careers site (careers.americanexpress.com).
  2. Its requisition number is 26015615; search for it on the careers site if the link ever stops working.
  3. Applications close on 4 Nov 2026.

Apply on American Express' site

No fees, ever. HireSetu never charges candidates, and no genuine employer asks for money to apply, interview or join. If anyone asks you to pay, stop and report the job.

Similar openings on HireSetu

View Analyst – Operational Risk Management on HireSetu · More American Express jobs · Finance jobs · Jobs in Gurugram · Career Insights · FAQ · Companies

HireSetu
Career Intelligence Platform