Analyst - Compliance, Digital Privacy

American Express

Analyst - Compliance, Digital Privacy

New York, NY
Full Time
Paid
  • Responsibilities

    JOB DESCRIPTION

    The American Express Global Privacy Oversight (GPO) team is a Second Line of Defense (2LoD) function that provides independent oversight, effective challenge, and privacy risk expertise across the enterprise. GPO partners with business and control functions to promote a strong culture of privacy, drive compliance with internal policies and regulatory requirements, and ensure privacy risks are appropriately identified, assessed, managed, and mitigated. Through independent oversight and credible challenge, GPO helps strengthen the Company's privacy risk management framework while supporting American Express' commitment to delivering the world's best customer experience every day.

    This position, based in New York, reports to the Senior Manager, Colleague Privacy, within Global Privacy Oversight (Second Line of Defense).The successful candidate will be passionate about colleague privacy and data protection, with a strong interest in privacy risk management and governance. They will be comfortable interacting with multiple stakeholders across a highly matrixed organization and will help promote Privacy-by-Design and strong privacy risk management practices across the Colleague Experience Group (CEG).

    The role will primarily support independent privacy risk oversight activities related to colleague (employee) personal data and workforce initiatives, ensuring privacy risks are effectively identified, assessed, managed, and mitigated in line with enterprise risk management expectations. Responsibilities include supporting privacy risk assessments, providing effective challenge to first-line stakeholders, monitoring privacy risk, partnering with Human Resources, Legal, Compliance, Risk, Technology, and other business partners, and helping to ensure compliance with applicable privacy laws, regulations, and American Express privacy requirements.

    RESPONSIBILITIES

    • Provide independent privacy risk oversight to American Express businesses globally, with a particular focus on colleague privacy and workforce-related initiatives within the Colleague Experience Group (CEG).
    • Support the monitoring, analysis, and reporting of privacy key risk indicators and other privacy risk management data.
    • Ensure adherence to the enterprise privacy risk appetite and privacy risk management framework through effective oversight, independent review, and Second Line of Defense challenge.
    • Review and challenge privacy risk assessments, control design, and mitigation strategies implemented by the First Line of Defense, particularly for initiatives involving the collection, use, sharing, retention, and protection of colleague (employee) personal data.
    • Partner with Human Resources, Compliance, Legal, Risk, Technology, and other stakeholders to support privacy legal and regulatory change management activities impacting colleague privacy.
    • Foster a culture of privacy across American Express by promoting Privacy-by-Design and sharing privacy best practices.
    • Support governance activities, reporting, and oversight routines that enable the effective management of colleague privacy risks across the enterprise.

    QUALIFICATIONS

    Qualifications

    • 2+ years of experience in Privacy, with particular focus on colleague privacy, workforce data, or human resources privacy.
    • Experience or demonstrated interest in privacy risk management, employee (colleague) personal data, privacy governance, and applicable data protection requirements.
    • Highly organized with strong written and verbal communication skills and the ability to manage multiple priorities simultaneously.
    • Ability to build relationships, influence stakeholders, mobilize cross-functional and regional teams, and work independently.

    Preferred Qualifications

    • Master's degree or equivalent in Data Protection and Privacy, Law, Business, Human Resources, or a related field.
    • Data Protection and Privacy Professional Certification (e.g., CIPP/US, CIPP/E, CIPM).
    • Prior work in Privacy, Compliance, Audit, Human Resources, and/or Risk Management at a global organization or financial services company preferred.
    • Experience supporting privacy risk assessments, employee data governance, or workforce-related privacy initiatives preferred.
    • Employment eligibility to work with American Express in the United States is required as the company will not pursue visa sponsorship for this position.

    Employment eligibility to work with American Express in the United States is required as the company will not pursue visa sponsorship for these positions.

    ABOUT US

    At American Express, our culture is built on a 175-year history of innovation, shared values and Leadership Behaviors, and an unwavering commitment to back our customers, communities, and colleagues. From delivering differentiated products to providing world-class customer service, we operate with a strong risk mindset, ensuring we continue to uphold our brand promise of trust, security, and service.

    As part of Team Amex, you’ll experience our powerful backing with comprehensive support for your holistic well-being and many opportunities to learn new skills, develop as a leader, and grow your career. Here, your voice and ideas matter, your work makes an impact, and together, you will help us define the future of American Express.

    ABOUT THE TEAM

    We back you with benefits that support your holistic well-being so you can be and deliver your best. This means caring for you and your loved ones' physical, financial, and mental health, as well as providing the flexibility you need to thrive personally and professionally:

    • Competitive base salaries
    • Bonus incentives
    • 6% Company Match on retirement savings plan
    • Free financial coaching and financial well-being support
    • Comprehensive medical, dental, vision, life insurance, and disability benefits
    • Flexible working model with hybrid, onsite or virtual arrangements depending on role and business need
    • 20+ weeks paid parental leave for all parents, regardless of gender, offered for pregnancy, adoption or surrogacy
    • Free access to global on-site wellness centers staffed with nurses and doctors (depending on location)
    • Free and confidential counseling support through our Healthy Minds program
    • Career development and training opportunities

    For a full list of Team Amex benefits, visit our Colleague Benefits Site .

    American Express is an equal opportunity employer and makes employment decisions without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran status, disability status, age, or any other status protected by law. American Express will consider for employment all qualified applicants, including those with arrest or conviction records, in accordance with the requirements of applicable state and local laws, including the California Fair Chance Act, the Los Angeles County Fair Chance Ordinance for Employers, and the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance. For positions covered by federal and/or state banking regulations, American Express will comply with such regulations as it relates to the consideration of applicants with criminal convictions.

    We back our colleagues with the support they need to thrive, professionally and personally. That's why we have Amex Flex, our enterprise working model that provides greater flexibility to colleagues while ensuring we preserve the important aspects of our unique in-person culture. Depending on role and business needs, colleagues will either work onsite, in a hybrid model (combination of in-office and virtual days) or fully virtually.

    US Job Seekers - Click to view the “ Know Your Rights ” poster. If the link does not work, you may access the poster by copying and pasting the following URL in a new browser window: https://www.eeoc.gov/poster.

    The below represents the expected salary range for this job requisition. Ultimately, in determining your pay, we’ll consider your location, experience, and other job-related factors.

  • Industry
    Financial Services