Manager-Compliance

Position: Manager Compliance, Global Privacy Oversight
Location: India, Gurgaon
American Express Global Privacy Oversight (GPO) team is a Second Line of Defense (2LoD) function that provides independent oversight, effective challenge, and privacy risk expertise across the enterprise. GPO partners with business and control functions to promote a strong culture of privacy, drive compliance with internal policies and regulatory requirements, and ensure privacy risks are appropriately identified, assessed, managed, and mitigated. Through independent oversight and credible challenge, GPO helps strengthen the company's privacy risk management framework while supporting American Express' commitment to delivering the world's best customer experience every day.
The successful candidate will be passionate about advancing privacy excellence and will bring strong global privacy subject matter expertise. The candidate will promote responsible use of personal data in line with individual and regulatory expectations while enabling innovation and a seamless user experience. The candidate will be comfortable interacting with multiple stakeholders across a highly matrixed organization to achieve goals and will be an advocate for Privacy-by-Design. The role will primarily provide Second Line of Defense oversight and effective challenge of the initiatives driven by the Global Privacy Center of Excellence (GPCE) team, led by Enterprise Technology Services’ Data Privacy and Governance Office, ensuring privacy risks are effectively identified, assessed, managed, and mitigated in line with enterprise risk management expectations. The candidate will be a key member of the US Consumer and Commercial Privacy Oversight team, but closely liaison with the Digital, Institutional, International, and Program Privacy teams to bring awareness of GPCE initiatives and engage Privacy SMEs accordingly.
Minimum Qualifications
• Five years of experience in Privacy, with particular focus on emerging global privacy regulatory awareness.
• Experience or demonstrated interest in global Privacy risk management.
• Highly organized with strong written and verbal communication skills and the ability to manage multiple priorities simultaneously.
• Ability to build relationships, influence stakeholders, mobilize cross-functional and regional teams, and work independently.
Preferred Additional Qualifications
Master's degree or equivalent in Data Protection and Privacy.
Data Protection and Privacy Professional Certification (e.g., CIPP/E, CIPP/US).
Prior work in Compliance, Audit/or Risk management at a Digital Technology and/or financial services company preferred
• Provide independent privacy risk oversight, strategic guidance, and consultation to American Express businesses globally, with a particular focus on global privacy awareness and regulatory expectations.
• Support the monitoring, analysis, and reporting of key privacy risk indicators and other privacy risk management data.
• Ensure adherence to the enterprise privacy risk appetite and privacy risk management framework through effective oversight, independent review, and Second Line of Defense challenge.
• Review and challenge privacy risk assessments, control design, and mitigation strategies implemented by the First Line of Defense.
• Partner with Compliance and other stakeholders to oversee privacy legal and regulatory change management activities.
• Foster a culture of privacy across American Express by promoting Privacy-by-Design and sharing of best practices.
• Support governance activities, reporting, and oversight routines that enable effective management of privacy risks across the enterprise.

Work arrangement
Hybrid