Manager Risk Management H/F
International Privacy Risk Manager
Are you an experienced Privacy Risk Manager who’s looking for a new challenge? Are you someone who is motivated to do a brilliant job for their colleagues and customers? Do you enjoy a dynamic, collaborative work environment where you can make a mark? Are you passionately curious with an impulse to seek new information and experiences and explore novel possibilities?
If you've answered 'yes' to any or all the above, then you could be just who I am looking for!
There is an exciting opportunity for a highly experienced Privacy Risk Manager to join American Express’ first line privacy risk management team. Privacy is one of the defining issues of our time and American Express is accountable for protecting the privacy of its customers, colleagues and third parties and for safeguarding the assets of the company from unauthorized access or use.
The first line Privacy Risk Management team will accelerate American Express’ progress in achieving sustainable and effective compliance with the evolving Privacy regulations in Europe, APAC and LACC, across business units and legal entities.
Reporting to the Director, International Privacy Risk Management, this role will support the evolution of high-quality Privacy risk management standards and practices across Europe, with a focus on the France market, and increase awareness of privacy standards, controls, regulations, and industry best practice.
Job Responsibilities:
Key responsibilities include, but are not limited to:
Privacy Practices:
Privacy Advice and Guidance: Provides expert interpretation of privacy requirements and helps teams apply them in practical business scenarios.
Privacy Risk Assessment: Identifies, documents, and evaluates privacy risks across processes, systems, products and vendors.
Privacy Controls & Governance: Applies the IPRM privacy control framework to be executed by 1st line risk experts.
Training and Awareness: Proactively engages and partners with stakeholders across Compliance and the business to create learning and development programs and guidance material to support colleagues to understand their roles and responsibilities in relation to privacy
Risk Management: Monitors the external regulatory and industry development to determine impacts to framework. Identifies potential gaps and best practice in AXP’s data privacy framework and helps to develop implementable solutions that can be rolled out across International.
Audit Engagement: Supports the business in managing privacy audits. Provide and recommend pre-audit submissions of self-identified findings, monitor all audit MAPs to ensure they are closed in a timely manner, participate in all audit meetings, and provide operational risk input into audit findings.
Supports the business in response to Privacy Operational Risk Events and Issues.
Recommended Skills/Qualifications:
5+ years of experience in Operational Risk, Compliance or a related discipline, preferably within the financial services industry.
Experience in implementing privacy requirements into business practices (processes & procedures), with an understanding of processes and information flows related to customer, employee data and other confidential information
Demonstrates a will to win, to deliver change in a challenging environment.
Strong analytical skills and rigor, able to source and interpret data in a meaningful way to present a compelling story and support decision making
Strong verbal and written communication skills, with an ability to craft messages that clearly and succinctly communicate key messages for internal and external audiences at all levels of the organization
Must be able to work well with different areas of the organization, building strong relationships & establishing trust through predictable delivery
Highly skilled at influencing without direct authority to drive progress towards critical outcomes
Ability to thrive in a fast paced and fluid business environment.
Experience of working with geographically dispersed colleagues across multiple lines of businesses
Proven experience of working in a legal & regulatory environment with tight deadlines, changing information and ambiguity. Knowledge of privacy regulation preferred