Analyst-Risk Management

You Lead the Way. We’ve Got Your Back.
With the right backing, people and businesses have the power to progress in incredible ways. When you join Team Amex, you become part of a global and diverse community of colleagues with an unwavering commitment to back our customers, communities and each other. Here, you’ll learn and grow as we help you create a career journey that’s unique and meaningful to you with benefits, programs, and flexibility that support you personally and professionally.
At American Express, you’ll be recognized for your contributions, leadership, and impact—every colleague has the opportunity to share in the company’s success. Together, we’ll win as a team, striving to uphold our company values and powerful backing promise to provide the world’s best customer experience every day. And we’ll do it with the utmost integrity, and in an environment where everyone is seen, heard and feels like they belong.
Join Team Amex and let's lead the way together.
Do you enjoy a dynamic, collaborative work environment where you can make a mark? Are you detail and process-oriented and enjoy problem solving? Are you passionately curious with an impulse to seek new information and experiences and explore novel possibilities?
If you've answered 'yes' to any or all the above, then you could be just who I am looking for!
There is an exciting opportunity for a risk professional to join the first line privacy practices & risk management team in a risk analyst role. The first line privacy team is responsible for oversight of the privacy risk environment and control framework across all business units in International, as well as for embedding sound data governance in all business processes to mitigate regulatory risk. The team is responsible for assisting the business units across EMEA, APAC and LACC with the design and execution of controls, processes, and procedures to ensure the proper usage and safeguarding of customer, colleague, and other confidential information. This team will ensure privacy practices and privacy assurance activities are in place across lines of business but will not provide compliance or legal privacy advice or services.
The privacy analyst role will play a key part establishing high-quality privacy risk management standards and practices, and increasing the awareness of privacy standards, controls, regulations, and industry best practice throughout the company.
3+ years of experience in Operational Risk, Privacy, Compliance, or a related discipline, preferably within the financial services industry.
Understanding or working knowledge of global privacy regulations including GDPR and DPDP for privacy and data protection.
Excellent attention to detail and commitment to quality; strong analytical and problem-solving skills
Self-motivated, business and customer focused with excellent relationship and organizational skills
Aptitude to operate within a policy & process driven environment and to maintain risk management / policy standards
Good team player with strong interpersonal and communication skills and a good sense of humour
Ability to interpret and present data
Ability to tailor a professional communication style to work effectively with individuals at various levels to influence without direct authority
Process enhancement mindset - ability to identify areas for improvement in existing processes and shape recommendations for change
Proficiency in Microsoft Office tools
Experience with SharePoint beneficial
Key responsibilities include, but are not limited to:
Supports the production of reporting and metrics on risks, issues and/or control deficiencies, results of self-assessments, control environment, tests, audits, and external events that would impact the Business Unit/Legal Entity’s ability to comply with applicable privacy requirements
Provide privacy SME support to business stakeholder and assist in completion of privacy risk assessments, impact assessments and Inherent Risk assessments.
Partners with Operational Excellence teams across EMEA, APAC and LACC to implement and execute high-quality Privacy risk management standards and practices across International and to increase awareness of privacy standards, controls, regulations, and industry best practice
In partnership with the GPO and Compliance, creates learning and development programs and guidance material to support colleagues to understand their roles and responsibilities in relation to privacy
Assists the business with the design and execution of controls to address privacy requirements and mitigate privacy risks, with particular focus on driving consistency across International
Support activities in relation to maintenance of the privacy governance framework (e.g., manage exceptions to the Privacy Procedure, maintain inventory of non-EPCC Applications, manage privacy notices)
Participates in privacy workgroups, projects or targeted reviews that require business engagement

Work arrangement
Hybrid