Analyst-Compliance

Analyst – Band 30, Global Privacy Oversight
The American Express Global Privacy Oversight are trusted advisors on the American Express Data Protection & Privacy Principles. The team drives privacy awareness, promote compliance towards internal privacy policies and regulatory expectations across the organisation and establish privacy as a strategic differentiator for the American Express brand.
As a second line of defense function, Global Privacy Oversight provides independent oversight, credible challenge and subject matter expertise to ensure privacy risks are appropriately identified, assessed, managed and monitored across the enterprise.
This position, based in India, shall report to the Manager, Global Privacy Oversight
The successful candidate will possess a strong passion for privacy and a solid understanding of global privacy regulations, privacy risk management and governance practices. The individual will apply risk and control principles to independently assess privacy risks, evaluate the effectiveness of controls, provide credible challenge to business stakeholders and support the continued maturity of the enterprise privacy program.
Given the global nature of the role, the successful candidate will collaborate with stakeholders across the US, EMEA, APAC and LACC regions and should be flexible to work in shifts aligned with these time zones.
Minimum 3 to 5 years of work experience in Privacy, Compliance, Risk Management, Internal Audit, Operational Risk or related control functions within a highly regulated industry (preferably financial services), consulting or a Big Four firm.
Preferably CA/LLB/CS/CIA/Master’s Degree.
Privacy certification such as CIPP (any jurisdiction), CIPM or equivalent would be an added advantage
Good knowledge of privacy best practices along with regulations and frameworks around privacy area of law such as GDPR, DPDPA, CCPA etc.
Working knowledge of privacy risk identification, assessment and management frameworks, including designing and implementing privacy related controls.
Highly organised and strong written and verbal communication skills, with the ability to effectively communicate complex concepts to diverse audiences
Must be self-motivated, dependable, adaptable and detail oriented with a proven ability to work independently or within a team environment.
Strong presentation skills, particularly in the development of professional and thoughtful materials.
Review Privacy Risk Assessments (PRAs), Data Protection Impact Assessments (DPIAs), Records of Processing Activities (ROPAs) and Risk & Control Self-Assessments (RCSAs) to evaluate privacy risks and the effectiveness of associated controls.
Execute second line privacy monitoring and oversight activities across business units and legal entities in accordance with the Global Privacy Oversight monitoring framework.
Prepare dashboards, metrics and executive reporting to communicate monitoring results, emerging risks and remediation status.
Provide effective challenge to business units on Privacy regulatory matters.
Work on agreed timelines of adjudication of privacy related queries from various stakeholders ensuring compliance with global privacy regulations and internal privacy program.
Partner cross-functionally to evaluate privacy considerations within existing and new processes and capabilities.
Assist in ensuring day to day operations are conducted in compliance with regulatory and legal requirements and company policies.
Undertake other ad-hoc projects and responsibilities such as implementation and operationalisation of DPDPA requirements.
Contribute to the continuous enhancement of Global Privacy Oversight methodologies and governance processes.
Foster a culture of privacy at American Express by advocating for privacy-by-design, integration of the American Express Data

Skills
Risk Management

Work arrangement
Hybrid