American Express

Director - Security Remediation Operations

American Express$150K — $180K *
Enterprise Technology
8 - 10 years of experience
Job Overview by Ladders

Qualifications

  • 10+ years in cybersecurity with senior leadership experience in security operations or remediation programs.
  • Proven experience leading cross-functional teams in large, complex enterprises.
  • In-depth understanding of vulnerability management methodologies and application security.
  • Successful track record developing remediation strategies and governance models.
  • Ability to influence stakeholders, including engineering and executive teams, on cybersecurity priorities.
  • Strong knowledge of security frameworks and global regulatory requirements.
  • Experience with SIEM and EDR platforms, as well as endpoint protection technologies.

Responsibilities

  • Build and mentor high-performing cybersecurity teams that value innovation and operational excellence.
  • Lead the Security Remediation Operations program to ensure consistent vulnerability remediation.
  • Partner with various teams to prioritize remediation efforts based on risk and business impact.
  • Drive improvements in vulnerability management workflows and increase developer adoption of secure practices.
  • Develop strategies, governance models, and performance metrics for effective remediation and risk reduction.
  • Collaborate with cybersecurity teams to ensure coordinated risk mitigation across the organization.
  • Lead initiatives focused on automation and operational efficiency to enhance security outcomes.

Benefits

  • Opportunity to shape security operations at a leading financial services company.
  • Engagement with cutting-edge cybersecurity technologies and methodologies.
  • Collaboration with diverse teams across the organization to enhance security posture.
  • Access to professional development and continuous learning opportunities.
  • Involvement in strategic initiatives that drive enterprise-level security improvements.
Full Job Description
Job Description

American Express is committed to protecting our customers, colleagues, and technology assets through proactive, risk-based cybersecurity practices. As part of this mission, the Director - Security Remediation Operations will lead the enterprise strategy and execution for vulnerability remediation operations across the Security Posture Validation organization. This highly collaborative leadership role serves as the operational bridge across vulnerability management functions, Enterprise Technology Services, engineering teams, and application owners to ensure cybersecurity risks are prioritized, understood, and remediated efficiently.

The Director will lead the operational framework that drives end-to-end vulnerability management, enabling technology teams to focus on the most critical risks and exposures while improving remediation outcomes across the enterprise. This leader will partner closely with application development organizations to streamline remediation workflows, remove operational barriers, improve developer education, and establish measurable improvements in vulnerability lifecycle performance.

This position requires a strategic leader with strong cybersecurity expertise, operational excellence, and the ability to influence across a highly matrixed organization. The successful candidate will be responsible for driving enterprise remediation strategies, governance, metrics, and continuous improvement initiatives while advancing automation and AI-enabled capabilities that strengthen American Express' overall security posture.

Responsibilities

  • Build, lead, and mentor high-performing cybersecurity teams, fostering a culture of continuous learning, innovation, inclusion, and operational excellence.
  • Lead the enterprise Security Remediation Operations program, driving consistent execution of vulnerability remediation processes across application, infrastructure, cloud, and platform security domains.
  • Partner with Enterprise Technology Services, application development teams, product organizations, and cybersecurity stakeholders to prioritize remediation efforts based on business risk, exploitability, and enterprise impact.
  • Drive the end-to-end vulnerability management lifecycle by improving operational workflows, reducing remediation friction, and increasing developer adoption of secure remediation practices.
  • Develop enterprise remediation strategies, governance models, operational controls, and performance metrics that improve remediation effectiveness and reduce enterprise cyber risk.
  • Collaborate closely with vulnerability management, penetration testing, application security, infrastructure security, and security engineering teams to ensure coordinated risk reduction across the organization.
  • Lead strategic initiatives focused on automation, workflow optimization, and operational efficiency, integrating security tooling and data to improve visibility, prioritization, and remediation outcomes.
  • Develop executive reporting, operational dashboards, and risk metrics that communicate enterprise security posture, remediation progress, and control effectiveness to senior leadership.
  • Oversee responses to complex security and operational events, coordinating cross-functional remediation activities, root cause analysis, and continuous improvement initiatives.
  • Establish and maintain security policies, standards, and operational procedures that align with enterprise governance, regulatory requirements, and industry best practices.
  • Support regulatory examinations, internal and external audits, and compliance activities by providing defensible remediation evidence, operational metrics, and control validation.
  • Partner with engineering and business leaders to improve developer education, vulnerability awareness, and secure development practices that reduce recurring security findings.
  • Drive enterprise adoption of AI-enabled cybersecurity operations, leveraging automation and intelligent analytics to improve vulnerability prioritization, operational decision-making, and remediation effectiveness.
  • Define governance, operational controls, and risk management strategies for AI-enabled cybersecurity capabilities, ensuring alignment with enterprise security standards, regulatory expectations, and responsible AI practices.
  • Provide strategic leadership on emerging AI security risks, adversarial attack techniques, and AI security innovations to strengthen enterprise cyber resilience and operational readiness.
  • Establish standards and governance for secure Prompt Design practices within cybersecurity operations to enable consistent, secure, and effective use of AI capabilities across vulnerability management and security operations.


Qualifications

  • 10+ years of progressive experience in cybersecurity, including senior leadership experience leading enterprise security operations, vulnerability management, or remediation programs.
  • Demonstrated experience leading cross-functional cybersecurity organizations within large, complex enterprise environments.
  • Strong understanding of vulnerability management methodologies, application security, infrastructure security, cloud security, and enterprise risk management practices.
  • Experience developing enterprise remediation strategies, operational governance, and metrics-driven security programs.
  • Proven ability to influence engineering organizations, application owners, and executive stakeholders to prioritize and remediate cybersecurity risks.
  • Strong understanding of security frameworks, governance models, and global regulatory requirements affecting enterprise cybersecurity programs.
  • Knowledge of Network Security, Application Security, Threat Modeling, Identity & Access Management (IAM), Cloud Security, Data Security, Security Architecture, and Security Governance.
  • Experience with Security Information and Event Management (SIEM) platforms such as Splunk, ArcSight, QRadar, or Elastic.
  • Experience with Endpoint Detection and Response (EDR) platforms including CrowdStrike, Carbon Black, SentinelOne, Microsoft Defender, or similar technologies.
  • Experience with endpoint protection technologies including Symantec Endpoint Protection, McAfee Endpoint Security, CrowdStrike Falcon, or comparable solutions.
  • Working knowledge of network protocols, including TCP/IP, DNS, HTTP, and enterprise networking fundamentals.
  • Experience using scripting languages such as Python, Bash, or PowerShell to automate operational workflows.
  • Strong understanding of cybersecurity technologies, threat intelligence, incident response, vulnerability management, and operational risk management.
  • Experience leading enterprise cybersecurity transformation initiatives involving AI-enabled monitoring, detection, automation, or threat management capabilities.
  • Knowledge of AI-enabled cybersecurity architectures, automated threat detection and response frameworks, AI governance principles, adversarial AI risks, and enterprise AI security considerations.
  • Exceptional communication, collaboration, and leadership skills with demonstrated ability to communicate effectively across technical teams, business partners, and executive leadership.
    Educational Requirement:
  • Bachelor's Degree in Computer Science, Cybersecurity, Information Systems, or a related field; or equivalent professional experience.
  • Advanced degree preferred (Master's Degree or MBA).
  • Industry certifications preferred, including CISSP, CISM, CRISC, GIAC, or similar cybersecurity certifications.

Employment eligibility to work with American Express in the United States is required as the company will not pursue visa sponsorship for these positions.

About American Express

Amex provides industrial services to the coatings and linings sector, providing support for commercial, industrial, and maritime projects such as petrochemical, power, and water treatment industries. They offer painting services for steel structures, storage tank linings and coatings, pipelines, floors, and marine vessels such as ships, tugboats, and barges.

American Express Careers

Join the vibrant team at American Express, a global leader in financial services, and be part of a company that values innovation, leadership, and diversity. At American Express, we offer more than just job opportunities; we provide a platform for professional growth and a chance to be part of a culture that is committed to excellence and inclusive growth. Work You’ll Do At American Express, we are dedicated to helping our employees reach their full potential. With a variety of career paths available in areas such as technology, marketing, finance, and customer service, American Express is the perfect place to advance your career. Our team is composed of highly skilled professionals who thrive on innovation and collaboration. Join our team and contribute to a company known for its prestigious history of leadership in the credit card industry. Engage in meaningful work that makes a real impact on our global scale business operations. American Express Leadership and Development Programs We believe in nurturing the leadership skills of our employees with extensive training programs and leadership development opportunities. Our commitment to professional growth is evident in our comprehensive benefits package that supports both personal and professional development. Internship Opportunities Start your career with an internship at American Express and gain valuable industry experience. Our internships offer a chance to develop skills, work on challenging projects, and learn from leaders in the industry. Interns at American Express are considered integral members of the team and are given responsibilities that provide a real insight into their future career paths. Diversity and Inclusion At American Express, diversity and inclusion are at the core of our company culture. We are committed to building a diverse workforce and inclusive environment where every employee feels valued and inspired. We offer diversity training programs that empower our employees to thrive and lead in a global marketplace. Networking and Innovation Our employees enjoy unparalleled opportunities for networking and personal growth through our global connections and innovative projects. American Express encourages a culture of innovation that helps propel our company and your career forward. Career Benefits and Growth American Express is dedicated to the growth of its employees. We offer competitive benefits, including health, retirement plans, and family leave, ensuring that our team members have the support they need to succeed both at work and in their personal lives. Join Our Team Explore the job opportunities and open positions at American Express. We are continuously hiring talented individuals who are passionate about their careers and interested in working for a company that offers a dynamic and supportive environment. Stay Connected Keep up to date with the latest from American Express Careers by following our career blog and signing up for job alert emails. Tailor your subscription to receive updates that match your skills and interests. Discover the exciting and rewarding career opportunities that await at American Express. SEARCH AMERICAN EXPRESS JOBS Whether you are looking for a full-time position, an internship, or a leadership opportunity, American Express offers a path to a rewarding career. Join us and make a difference with your passion, creativity, and drive.
Learn more about American Express
Size
64,000 employees
Market Cap
$108.1 billion
Industry
Net Income
$3.1 billion
Founded
1850
5 Year Trend
+3.5%
Revenue
$37 billion
NASDAQ

Similar Jobs

More Jobs at American Express

More Enterprise Technology Jobs

Find similar Director - Security Remediation Operations jobs: