Do you enjoy a dynamic, collaborative work environment where you can make a mark? Are you someone who knows how to drive high performing business results through people? Are you detail and process-oriented and enjoy problem solving?

If you've answered 'yes' to any or all the above, then you could be just who I am looking for!

There is an exciting opportunity for a highly experienced, senior risk professional to join the American Express Privacy Center of Excellence (COE) and lead an expanding first line privacy practices & risk management team. This team ensures privacy practices and privacy assurance activities are in place across lines of business but will not provide compliance or legal privacy advice or services.

I am looking for a Director of Privacy Practices and Risk Management to help shape American Express’ future in the strategically important domain of data privacy and lead the evolution of high-quality Privacy risk management standards and practices across Europe, APAC and LACC and increase awareness of privacy standards, effectiveness of controls, compliance with regulations, and adoption of industry best practice throughout the company.

Responsibility for the core privacy pillars (e.g., Notice & Transparency, Retention & Disposal, Data Transfers, Digital Trackers etc.) in American Express will be divided across this new role and an existing Director of Privacy Practices and Risk Management. In addition, both roles will be responsible forassistingregional business units across Europe, APAC and LACC with the design, enhancement and operationalisation of controls, processes, and procedures to ensure the proper usage and safeguarding of customer, colleague, and other confidential information.

How will you make an impact in this role?

• Develops and nurtures the great talent within the team and network to create a pipeline of future talent

• Fosters strong collaboration and information sharing across Privacy Practices and Risk Management teams.

• Sets the privacy practices framework for core privacy pillars to be executed by 1st line Operational Risk Experts

• Provides data privacy subject matter expertise to enable the successful delivery of privacy change and regulatory compliance initiatives.

• Partners with Operational Excellence teams across Europe, APAC and LACC to implement and execute high-quality Privacy risk management standards and practices and to increase awareness of privacy standards, controls, regulations, and industry best practice.

• Assists the regional business teams with the design, enhancement, and operationalisationof controls to address privacy requirements and mitigate privacy risks, with particular focus on driving consistency across Europe, APAC and LACC.

• Supports the deployment of privacy management technology and tools (automation) to enhance data privacy controls.

• Shapes and oversees the 1st line of defence Privacy testing framework, coordinating with 2nd line Privacy to avoid overlap and testing duplication.

• Provides transparency to Business Unit/Legal Entity and compliance management through accurate reporting and metrics on risks, issues and/or control deficiencies, results of self-assessments, control environment, tests, audits, and external events that would impact the Business Unit/Legal Entity’s ability to comply with applicable privacy requirements.

• Stays up to date on trends and advances in industry risk standards and works with business leaders to evaluate, recommend, and implement opportunities to enhance the business/legal entity privacy risk profile and management practices.

• Assists the business with preparing for privacy-related exams, compliance tests and internal audits and notifies and engages2nd line Privacy and Compliance colleagues during such reviews.

• In partnership with 2nd line Privacy and Compliance, fosters a privacy-aware culture across the company via the creation of learning and development programs and guidance material to support colleagues to understand their roles and responsibilities in relation to privacy.

• Proactively engages and partners with stakeholders across the business to promote privacy by design and educate teams on changes to laws and regulations and external privacy practices.

• Identifies potential gaps and best practice in American Express’ data privacy framework. Where gaps are identified, helps to develop implementable solutions that can be rolled out across Europe, APAC and LACC. Similarly, where

• Able to think critically and use data-driven insights to solve problems and achieve desired outcomes.

• Execution-focused with an ability to develop strategy, influence stakeholders, drive implementation and measure success.

• Strong English language verbal and written communication skills, with an ability to craft messages that clearly and succinctly communicate key messages for internal and external audiences at all levels of the organization.