At American Express, our culture is built on a 175-year history of innovation, shared values and Leadership Behaviors, and an unwavering commitment to back our customers, communities, and colleagues. As part of Team Amex, you'll experience this powerful backing with comprehensive support for your holistic well-being and many opportunities to learn new skills, develop as a leader, and grow your career.

Here, your voice and ideas matter, your work makes an impact, and together, you will help us define the future of American Express.

You Lead the Way. We’ve Got Your Back.

With the right backing, people and businesses have the power to progress in incredible ways. When you join Team Amex, you become part of a global and diverse community of colleagues with an unwavering commitment to back our customers, communities and each other. Here, you’ll learn and grow as we help you create a career journey that’s unique and meaningful to you with benefits, programs, and flexibility that support you personally and professionally.

At American Express, you’ll be recognized for your contributions, leadership, and impact—every colleague has the opportunity to share in the company’s success. Together, we’ll win as a team, striving to uphold our company values and powerful backing promise to provide the world’s best customer experience every day. And we’ll do it with the utmost integrity, and in an environment where everyone is seen, heard and feels like they belong.

Join Team Amex and let's lead the way together.

How will you make an impact in this role?

This position is a 16-week Information Security Analyst Intern - General Governance, Risk and Compliance (GRC) opportunity to demonstrate knowledge gained and apply it in a dynamic, high-performing Technology Risk & Information Security team. Responsible for assisting with activities designed to systematically run information security, such as security investigations, intelligence, assurance, and/or other project oversight, including developing governance procedures, risk analysis and compliance with regulatory guidance.

What type of work can you expect to do in Information Security at American Express?

Governance, Risk, Compliance

·       Bridge traditional boundaries between cyber and IT risk and expanding partnerships with IT and the business to drive risk reduction in the enterprise.

·       Innovate Risk Management through enhancements in tooling and automation of processes; expand the capabilities of technology risk management.

·       Extend risk management and control expertise beyond the information security domains into IT development organizations and the business.

·       Identify and help mitigate IT and information security risk across people, processes, and technologies.

·       Support the development, validation, and reporting of Key Risk Indicators (KRIs) to enhance ongoing risk monitoring and governance.

·       Assist in conducting risk analyses for new products and identifying control or process gaps.

·       Assist in analyzing internal and external exam and audit requests, and support responses to regulatory inquiries by gathering evidence and coordinating with internal stakeholders.

Security Incident Response/Threat Intelligence

·       Act as the front line of defense at American Express protecting the brand, employees, assets and card members across the globe against threats 24/7/365.

·       Monitor, detect, and respond to security events and incidents that affect AXP globally.

·       Assist in coordinating and documenting cyber incident management activities, analysing incidents, maintaining logs, and reporting.

Minimum Qualifications

·       Current enrolment in Computer Science, Software Engineering, Information Systems, bachelor’s degree in a Canadian University.

·       Target graduation date in 2026.

·       Must be able to work from our office in Toronto, Ontario 3 days a week as this is a hybrid internship.

·       In-depth knowledge of cyber threats along with common security controls, detection capabilities, and other practices / solutions for securing digital environments.

·       Understanding of what information or assets are of value to threat actors and how organizations are breached.

·       Must have strong verbal and written communication skills; interpersonal collaborative skills; and the ability to communicate security and risk-related concepts to technical and non-technical audiences.

·       Can apply a variety of structured analytic techniques to generate and test a hypothesis, assess cause and effect, challenge analysis, and support decision making.

Preferred Qualifications

·       Understanding on Application Security, OWASP Top 10 (Web, API. mobile), Cloud Security, DevSecOps.

·       Familiarity with Agile/Scrum development process.

·       Familiarity with project collaboration and management tools like JIRA and Confluence dashboard and workflows to track action items within projects and consultation requests.

·       Language skills in Spanish or Portuguese are an asset.

Hiring Range: $47,000 to $71,000 annually 
The above represents the expected salary range for this job requisition. Ultimately, in determining your pay, we’ll consider your location, experience, and other job-related factors.
The job posting is for an existing vacancy.

We back our colleagues and their loved ones with benefits and programs that support their holistic well-being. That means we prioritize their physical, financial, and mental health through each stage of life. Benefits include:

·       Competitive base salaries

·       Flexible work arrangements and schedules with hybrid and virtual options with Amex Flex

·       Free access to global on-site wellness centers staffed with nurses and doctors (depending on location)

·       Career development and training opportunities

American Express is committed to providing an inclusive and accessible work environment in which all people who apply for positions or who work for or on behalf of Amex are treated with dignity and respect and are provided with equal treatment with respect to employment, regardless of that person's age, sex, sexual orientation, gender identity, gender expression, race, colour, ancestry, ethnic or national origin, citizenship, religion or creed, marital status, family status, pregnancy, disability, record of offences, social condition or origin, political beliefs, association or activity or other factors prohibited under applicable Human Rights legislation (the “Prohibited Grounds”).

If you have a disability and need accommodation, please speak with the Recruiter for more information.
Offer of employment with American Express is conditioned upon the successful completion of a background verification check, subject to applicable laws and regulations."