Privacy Risk Manager bei American Express

At American Express, our culture is built on a 175-year history of innovation, shared values and Leadership Behaviors, and an unwavering commitment to back our customers, communities, and colleagues. As part of Team Amex, you'll experience this powerful backing with comprehensive support for your holistic well-being and many opportunities to learn new skills, develop as a leader, and grow your career.

Here, your voice and ideas matter, your work makes an impact, and together, you will help us define the future of American Express.

How will you make an impact in this role?

Privacy is one of the defining issues of our time. American Express is accountable for safeguarding the information assets of American Express from unauthorized access or use, and for protecting the privacy of our customers, colleagues and third parties.

ICS Governance & Control sits within International Card Services (ICS) which comprises of all the issuing functions across all 28 international markets excluding the US - colleagues operate across a variety of geographies and disciplines. ICS issues products to our Consumer and Commercial customers – the organization is an integral part of the global growth strategy for American Express; offering differentiated products and services is critical to our success and promises to drive significant growth and value through the delivery of innovative products, tailored to the needs of our customers.

Reporting to the Director, International Privacy Practices & Risk Management, this role will support the evolution of high-quality Privacy risk management standards and practices across International and increase awareness of privacy standards, controls, regulations, and industry best practice.  

The successful candidate will lead and develop a small team of risk professionals.

This role requires strong operations and risk management skills, as well as excellent relationship management abilities with the ability to impact and influence at all levels, often without direct authority. It will involve extensive collaboration with multiple partners across numerous business units, and jurisdictions.

Key responsibilities include, but are not limited to:

• Privacy Practices:

• Governance framework:   Sets the International privacy practices framework to be executed by 1st line Risk Experts, including the regulatory documentation data principles

• Training and Awareness: Proactively engages and partners with stakeholders across Compliance and the business to create learning and development programs and guidance material to support colleagues to understand their roles and responsibilities in relation to privacy

• Privacy Practices: Monitors the external regulatory and industry development to determine impacts to framework.  Identifies potential gaps and best practice in the American Express data privacy framework and helps to develop implementable solutions that can be rolled out across International.

• Audit Engagement: Supports the business in managing privacy audits. The incumbent will provide and recommend pre-audit submissions of self-identified findings, monitor all audit MAPs to ensure they are closed in a timely manner, participate in all audit meetings, and provide operational risk input into audit findings.

• Documents and manages exceptions to the Privacy Procedures

• Provides Privacy advice and guidance

Minimum qualifications:

• Experience in Operational Excellence, Compliance, Operational Risk or a related discipline.
• Experience managing a small high-performing team, including leading and developing others, as well as managing performance
• Experience in implementing privacy requirements into business practices (processes & procedures), with an understanding of processes and information flows for business and operational units that manage customer, employee data and other confidential information
• Demonstrates a will to win, to deliver change in a challenging environment.
• Strong analytical skills and rigor, able to source and interpret data in a meaningful way to present a compelling story and support decision making
• Strong verbal and written communication skills, with an ability to craft messages that clearly and succinctly communicate key messages for internal and external audiences at all levels of the organization
• Must be able to work well with different areas of the organization, building strong relationships & establishing trust through predictable delivery
• Highly skilled at influencing without direct authority to drive progress towards critical outcomes
• Ability to thrive in a fast paced and fluid business environment.
• Experience of working with geographically dispersed colleagues across multiple lines of businesses
• Existing established network of relationships with key stakeholders such as Compliance teams in the markets, as well as key product & tech partners an advantage
• Proven experience of working in a legal & regulatory environment with tight deadlines, changing information and ambiguity.

• Knowledge of privacy regulation and records retention and deletion practices preferred

   

   

We back you with benefits that support your holistic well-being so you can be and deliver your best. This means caring for you and your loved ones' physical, financial, and mental health, as well as providing the flexibility you need to thrive personally and professionally:

• Competitive base salaries 
• Bonus incentives 
• Support for financial-well-being and retirement 
• Comprehensive medical, dental, vision, life insurance, and disability benefits (depending on location) 
• Flexible working model with hybrid, onsite or virtual arrangements depending on role and business need 
• Generous paid parental leave policies (depending on your location) 
• Free access to global on-site wellness centers staffed with nurses and doctors (depending on location) 
• Free and confidential counseling support through our Healthy Minds program 
• Career development and training opportunities

Offer of employment with American Express is conditioned upon the successful completion of a background verification check, subject to applicable laws and regulations.