Job Description

The American Express Global Privacy Oversight are trusted advisors on the American Express Data Protection & Privacy Principles. We work to raise privacy awareness, drive compliance towards internal privacy policies and regulatory expectations across the organization and establish privacy as a strategic differentiator for the American Express brand. As a second line of defense function, Global Privacy oversee, provide expertise in, and challenge the identification, management, and mitigation of privacy risks across the company in line with the privacy framework and the company’s vision to provide the world’s best customer experience every day.

This position, based in India shall report to the Director, APAC Privacy.

The successful candidate must be passionate about privacy, with subject matter expertise covering privacy regulations across the APAC. The candidate shall be responsible for deploying an effective working knowledge of risk and control practices to support the business in achieving objectives alongside privacy risk management goals.

Key Responsibilities

• Promote a culture of data protection and compliance across APAC Region.

• Provide effective challenge to business units on Privacy regulatory matters.

• Undertake monitoring and oversight activities from Privacy perspective impacting Business Units / Legal entities.

• Continuously evaluate the existing data protection framework to identify areas of no or partial compliance and work with relevant teams to rectify issues.

• Partner cross-functionally to evaluate privacy considerations within existing and new processes and capabilities.

• Build strong, collaborative relationships with risk oversight functions, GCO, Compliance, International Compliance Testing, Operational Excellence, Information Security, Public Affairs, and many others to drive privacy best practices throughout the enterprise.

• Support development, coordination and implementation of the global privacy program and drive privacy awareness and education across the APAC region.

• Support business in accomplishing privacy risk management goals, advising on best practice controls and risk mitigation strategies.

Minimum Qualifications

• 6-8 years’ experience in a Compliance / Legal/ Audit / Risk Management role in a highly regulated domain or relevant experience in consultancy within the Big Four or in a bank/financial institution background.

• Good knowledge of Privacy Laws and practices

• Ability to work effectively under pressure, competing priorities under demanding deadlines and to manage sensitive and confidential information.

• Excellent written and verbal communication and presentation skills, able to create compelling arguments and influence across all levels of the organization.

• Ability to operate multi-nationally with regulators, law enforcement, business partners and Agents

• Ability to conceptualize and break down complex issues into actionable tasks

• Ability to address large groups and conduct training.

• High standard of integrity

• Strong computer knowledge; excellent MS Word, Excel, PowerPoint skills.

• Must be self-motivated, dependable, adaptable and detail oriented with a proven ability to work independently or within a team environment.

• Demonstrated ability to manage risk strategically and tactically and deliver initiatives to advance the maturity and soundness of the control environment.

• Excellent relationship building skills to partner effectively across diverse, cross-functional teams in complex and rapidly changing environments.

• Outstanding problem-solving and analytical skills, with strong learning agility and willingness to embrace and lead through change.

Preferred Additional:

• Preferably CA/LLB/CS/CIA/Master’s Degree.
• Professional Certification (e.g. CIPP/E/A, CIPM).
• Privacy subject matter expert who remains current on emerging privacy issues, regulation, industry activities and emerging technologies in the APAC region.
• Working knowledge of financial privacy and other customer privacy laws and experience collaborating with regulators.
• Working knowledge of privacy risk identification, assessment, and management frameworks, including designing and implementing privacy related controls.

At American Express, our culture is built on a 175-year history of innovation, shared values and Leadership Behaviors, and an unwavering commitment to back our customers, communities, and colleagues. From delivering differentiated products to providing world-class customer service, we operate with a strong risk mindset, ensuring we continue to uphold our brand promise of trust, security, and service.

As part of Team Amex, you’ll experience our powerful backing with comprehensive support for your holistic well-being and many opportunities to learn new skills, develop as a leader, and grow your career. Here, your voice and ideas matter, your work makes an impact, and together, you will help us define the future of American Express.