Manager Compliance H/F

The Global Risk & Compliance (GRC) organization serves as American Express’ independent risk management function. GRC maintains the enterprise risk framework, provides oversight and challenge, and monitors key risks. By embedding risk discipline into strategy and operations, GRC enables responsible growth, innovation, and long-term value creation while protecting customers and shareholders.

American Express Global Privacy Oversight (GPO) team is a Second Line of Defense (2LoD) function that provides independent oversight, effective challenge, and privacy risk expertise across the enterprise. GPO partners with business and control functions to promote a strong culture of privacy, drive compliance with internal policies and regulatory requirements, and ensure privacy risks are appropriately identified, assessed, managed, and mitigated. Through independent oversight and credible challenge, GPO helps strengthen the company's privacy risk management framework while supporting American Express' commitment to delivering the world's best customer experience every day.

This position, based in Paris, reports to the Digital Privacy Director.

The successful candidate will be passionate about Digital Privacy, Technology Services and tooling’s, Artificial Intelligence (AI), and Emerging Technologies, with strong privacy subject matter expertise. They will be comfortable interacting with multiple stakeholders across a highly matrixed organization to achieve goals and will be an advocate for Privacy-by-Design. The role will primarily provide Second Line of Defense oversight and effective challenge over ETS-led digital products, systems, platforms, AI use cases, and emerging technology initiatives, ensuring privacy risks are effectively identified, assessed, managed, and mitigated in line with enterprise risk management expectations.

- Five years of experience in Privacy, with particular focus on emerging Technologies.
- Experience or demonstrated interest in Digital Privacy, Artificial Intelligence (AI), and/or Emerging Technology risk management.
- Highly organized with strong written and verbal communication skills and the ability to manage multiple priorities simultaneously.
- Ability to build relationships, influence stakeholders, mobilize cross-functional and regional teams, and work independently.

Preferred Additional Qualifications

- Master's degree or equivalent in Data Protection and Privacy.
- Data Protection and Privacy Professional Certification (e.g., CIPP/E, CIPP/US).
- Prior work in Compliance, Audit/or Risk management at a Digital Technology and/or financial services company preferred.

Non-considerations for sponsorship:

Employment eligibility to work with American Express in France is required as the company will not pursue visa sponsorship for these positions.