American Express is seeking a skilled Regulatory Change & Inventory Management Director – Vendor Strategy & Third-Party Oversight responsible for defining and executing the vendor strategy and third-party oversight framework supporting regulatory change initiatives. The Director will ensure that external partners, professional services firms, technology providers, and other third parties are selected, governed, and managed in a manner that supports regulatory commitments, business objectives, risk-management expectations, and sustainable delivery. This role will serve as a strategic partner across Compliance Regulatory Change, Procurement, Legal, and Technology providing centralized leadership over vendor strategy, third-party performance, commercial effectiveness, and associated risks. Vendor Strategy & Operating Model • Develop and maintain an enterprise-aligned vendor strategy for the regulatory change portfolio, including decisions regarding strategic partners, specialized capabilities, capacity augmentation, and insourcing versus outsourcing. • Assess current and future vendor capabilities against regulatory change priorities and identify capability, capacity, concentration, and dependency risks. • Drive opportunities to rationalize the vendor landscape, strengthen strategic partnerships, reduce unnecessary complexity, and improve value from external spend. • Partner with senior leaders to forecast third-party resource and capability requirements based on the regulatory change portfolio. Third-Party Oversight & Risk Management • Establish robust governance and oversight of vendors supporting regulatory change activities throughout the third-party lifecycle. • Ensure third-party engagements comply with applicable internal policies, risk-management standards, contractual requirements, and regulatory expectations. • Develop risk-based oversight mechanisms for critical and high-impact vendors, including performance monitoring, issue management, escalation, and remediation. • Identify and manage third-party risks, including operational, compliance, technology, information security, data, concentration, resiliency, and delivery risks. • Maintain clear accountability and evidence demonstrating effective oversight of third-party activities supporting regulatory obligations. Vendor Performance & Governance • Establish standardized performance measures, service-level expectations, scorecards, and governance routines for key vendors. • Implement mechanisms to identify emerging performance concerns and ensure timely corrective action. • Establish clear escalation pathways for significant vendor issues and provide transparent reporting to senior management. • Partner with program and initiative leaders to ensure third-party deliverables meet agreed quality, timing, and regulatory requirements. Commercial & Financial Management • Partner with Global Supply Management on vendor selection, contracting, renewals, statements of work, and commercial negotiations. • Ensure commercial decisions appropriately balance cost, capability, regulatory risk, delivery timelines, and long-term strategic value. • Significant leadership experience in regulatory change, third-party risk management, vendor management, strategic sourcing, transformation, risk, compliance, or a related discipline. • Demonstrated experience operating in a highly regulated financial-services environment. • Strong understanding of third-party lifecycle management, vendor governance, risk assessment, contracting, performance management, and commercial management. • Proven ability to establish governance frameworks, executive reporting, performance measures, and escalation processes. • Demonstrated ability to influence senior executives and navigate complex, matrixed organizations. • Excellent judgment, communication, negotiation, and executive presentation skills. Preferred Qualifications • Experience leading vendor strategy or third-party oversight for large-scale regulatory or enterprise transformation programs. • Knowledge of financial-services third-party risk management and operational resilience expectations. • Demonstrated success improving vendor performance while reducing cost, complexity, or third-party risk. • Bachelor’s degree required; advanced degree or relevant professional certifications preferred.