Senior Analyst-Control Management

With the right backing, people and businesses have the power to progress in incredible ways. When you join Team Amex, you become part of a global and diverse community of colleagues with an unwavering commitment to back our customers, communities and each other. Here, you’ll learn and grow as we help you create a career journey that’s unique and meaningful to you with benefits, programs, and flexibility that support you personally and professionally.

At American Express, you’ll be recognized for your contributions, leadership, and impact—every colleague has the opportunity to share in the company’s success. Together, we’ll win as a team, striving to uphold our company values and powerful backing promise to provide the world’s best customer experience every day. And we’ll do it with the utmost integrity, and in an environment where everyone is seen, heard and feels like they belong.

Join Team Amex and let's lead the way together.

How we serve our customers is constantly evolving and is a challenge we gladly accept. Whether you’re finding new ways to prevent identity fraud or enabling customers to start a new business, you can work with one of the most valuable data sets in the world to identify insights and actions that can have a meaningful impact on our customers and our business. And, with opportunities to learn from leaders who have defined the course of our industry, you can grow your career and define your own path. Find your place in risk and analytics on #TeamAmex.

Credit & Fraud Risk is looking for a Sr Analyst of Privacy Risk Control focused on ensuring control management is embedded in the day-to-day operations of our organization. It will involve extensive collaboration with multiple partners across numerous business units, functional areas, and geographies to strengthen the organization's privacy risk management framework and control environment.

Required Qualifications:

- 2+ Years experience in operational risk management (e.g., within Risk and/or Internal Audit function) Understanding of critical operational risk management lifecycle activities
- Knowledge of privacy regulations, including GDPR, CCPA/CPRA, and GLBA
- Experience managing risk issues, remediation plans, and audit findings
- Strong analytical, problem-solving, communication, and stakeholder management skills
- Ability to influence cross-functional teams and communicate risk matters to senior leadership

Preferred Qualifications:

- Bachelor's Degree in Finance, Business, Risk Mgmt., or related field; advanced degrees (e.g., MBA, MSc) or certifications are advantageous
- Experience in banking, financial services, payments, or other highly regulated industries
- Professional certifications such as CIPP/US, CIPM, CRISC, CISA, or CRMP
- Familiarity with GRC platforms such as Archer, ServiceNow GRC, or OneTrust
- Experience with enterprise risk management and three-lines-of-defense models
- Knowledge of data governance, data classification, data retention, and privacy incident management