Privacy Specialist – Colleague Privacy Oversight

Job Description

Analyst – Compliance, Digital Privacy | American Express

The Tone:
This is a full-time role at American Express, located in New York. The company provides financial products and services, aiming to deliver the world’s best customer experience. This position is within the Global Privacy Oversight team, a second line of defense function that provides independent oversight and privacy risk expertise across the enterprise. The role is critical in strengthening the company’s privacy risk management framework and ensuring privacy risks are appropriately managed and mitigated.

The TL;DR
• Role: Early Career Analyst
• Type: Full-time
• Location: In-person, New York, NY

• Team: Global Privacy Oversight (Second Line of Defense), reporting to the Senior Manager, Colleague Privacy.
• Mission: To provide independent privacy risk oversight for colleague personal data and workforce initiatives, ensuring risks are identified, assessed, and mitigated.

What You’ll Actually Do
• Support privacy risk assessments: Assist in conducting independent privacy risk assessments specifically related to colleague personal data and workforce initiatives.
• Provide effective challenge: Offer credible and effective challenge to first-line stakeholders, promoting strong privacy risk management practices across the Colleague Experience Group.
• Monitor and mitigate privacy risks: Actively monitor privacy risk, ensuring risks are effectively identified, assessed, managed, and mitigated in line with enterprise expectations.
• Partner across functions: Collaborate with Human Resources, Legal, Compliance, Risk, Technology, and other business partners on privacy matters.
• Promote compliance and Privacy-by-Design: Help ensure adherence to applicable privacy laws, regulations, and American Express privacy requirements, while advocating for Privacy-by-Design.

The Must-Haves
• Background: An early career privacy professional with at least 2 years of experience, specifically focusing on colleague privacy, workforce data, or human resources privacy. Requires demonstrated interest or experience in privacy risk management, employee personal data, privacy governance, and applicable data protection requirements.
• Experience: 2+ years in Privacy, with an emphasis on colleague privacy, workforce data, or human resources privacy.
• Skills: Strong written and verbal communication abilities; highly organized with the capacity to manage multiple priorities simultaneously; aptitude for building relationships and influencing stakeholders; ability to work independently.
• Bonus: Master’s degree or equivalent in Data Protection and Privacy, Law, Business, Human Resources, or a related field; Data Protection and Privacy Professional Certification (e.g., CIPP/US, CIPP/E, CIPM); prior work in Privacy, Compliance, Audit, Human Resources, and/or Risk Management at a global organization or financial services company; experience supporting privacy risk assessments, employee data governance, or workforce-related privacy initiatives.