The Global Risk & Compliance (GRC) organization serves as American Express’ independent risk management function. GRC maintains the enterprise risk framework, provides oversight and challenge, and monitors key risks. By embedding risk discipline into strategy and operations, GRC enables responsible growth, innovation, and long-term value creation while protecting customers and shareholders.
American Express Global Privacy Oversight (GPO) team is a Second Line of Defense (2LoD) function that provides independent oversight, effective challenge, and privacy risk expertise across the enterprise. GPO partners with business and control functions to promote a strong culture of privacy, drive compliance with internal policies and regulatory requirements, and ensure privacy risks are appropriately identified, assessed, managed, and mitigated. Through independent oversight and credible challenge, GPO helps strengthen the company's privacy risk management framework while supporting American Express' commitment to delivering the world's best customer experience every day.
This position, based in Spain, reports to the Digital Privacy Director.
The successful candidate will be passionate about Digital Privacy, Technology Services and tooling’s, Artificial Intelligence (AI), and Emerging Technologies, with strong privacy subject matter expertise. They will be comfortable interacting with multiple stakeholders across a highly matrixed organization to achieve goals and will be an advocate for Privacy-by-Design. The role will primarily provide Second Line of Defense oversight and effective challenge over ETS-led digital products, systems, platforms, AI use cases, and emerging technology initiatives, ensuring privacy risks are effectively identified, assessed, managed, and mitigated in line with enterprise risk management expectations.
ResponsibilitiesProvide independent privacy risk oversight, strategic guidance, and consultation to American Express businesses globally, with a particular focus on Digital Privacy, Systema and Platform, AI, and Emerging Technologies.
Support the monitoring, analysis, and reporting of privacy key risk indicators and other privacy risk management data.
Ensure adherence to the enterprise privacy risk appetite and privacy risk management framework through effective oversight, independent review, and Second Line of Defense challenge.
Review and challenge privacy risk assessments, control design, and mitigation strategies implemented by the First Line of Defense, particularly for digital initiatives, AI solutions, and emerging technology deployments.
Partner with Compliance and other stakeholders to oversee privacy legal and regulatory change management activities.
Foster a culture of privacy across American Express by promoting Privacy-by-Design, and sharing of best practices.
Support governance activities, reporting, and oversight routines that enable effective management of privacy risks across the enterprise.
Five years of experience in Privacy, with particular focus on emerging Technologies.
Experience or demonstrated interest in Digital Privacy, Artificial Intelligence (AI), and/or Emerging Technology risk management.
Highly organized with strong written and verbal communication skills and the ability to manage multiple priorities simultaneously.
Ability to build relationships, influence stakeholders, mobilize cross-functional and regional teams, and work independently.
Preferred Additional Qualifications
Master's degree or equivalent in Data Protection and Privacy.
Data Protection and Privacy Professional Certification (e.g., CIPP/E, CIPP/US).
Prior work in Compliance, Audit/or Risk management at a Digital Technology and/or financial services company preferred.
Employment eligibility to work with American Express in Spain is required as the company will not pursue visa sponsorship for these positions.
About Us
At American Express, our culture is built on a 175-year history of innovation, shared values and Leadership Behaviors, and an unwavering commitment to back our customers, communities, and colleagues. From delivering differentiated products to providing world-class customer service, we operate with a strong risk mindset, ensuring we continue to uphold our brand promise of trust, security, and service.
As part of Team Amex, you’ll experience our powerful backing with comprehensive support for your holistic well-being and many opportunities to learn new skills, develop as a leader, and grow your career. Here, your voice and ideas matter, your work makes an impact, and together, you will help us define the future of American Express.
About the TeamWe back you with benefits that support your holistic well-being so you can be and deliver your best. This means caring for you and your loved ones' physical, financial, and mental health, as well as providing the flexibility you need to thrive personally and professionally:
- Competitive base salaries
- Bonus incentives
- Support for financial-well-being and retirement
- Comprehensive medical, dental, vision, life insurance, and disability benefits (depending on location)
- Flexible working model with hybrid, onsite or virtual arrangements depending on role and business need
- Generous paid parental leave policies (depending on your location)
- Free access to global on-site wellness centers staffed with nurses and doctors (depending on location)
- Free and confidential counseling support through our Healthy Minds program
- Career development and training opportunities
Offer of employment with American Express is conditioned upon the successful completion of a background verification check, subject to applicable laws and regulations.
Skills Required
- Five years of experience in privacy, particularly involving emerging technologies
- Experience or demonstrated interest in digital privacy, artificial intelligence, and/or emerging technology risk management
- Strong written and verbal communication skills
- Ability to manage multiple priorities simultaneously
- Ability to build relationships, influence stakeholders, mobilize cross-functional and regional teams, and work independently
- Master's degree or equivalent in Data Protection and Privacy
- Data Protection and Privacy Professional Certification, such as CIPP/E or CIPP/US
- Prior compliance, audit, or risk management experience at a digital technology or financial services company
American Express Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about American Express and has not been reviewed or approved by American Express.
-
Strong & Reliable Incentives — Bonuses are often viewed as strong and materially boost total compensation when combined with benefits. Company-performance bonuses are highlighted as a recurring strength.
-
Leave & Time Off Breadth — Paid time off and paid leave are frequently highlighted as strengths within the total rewards package. These policies support work-life balance and contribute meaningfully to overall satisfaction.
-
Retirement Support — Retirement benefits are frequently mentioned as a positive component of the package. These offerings add tangible value beyond base salary.
American Express Insights
What We Do
At American Express, we know that with the right backing, people and businesses have the power to progress in incredible ways. Whether we’re supporting our customers’ financial confidence to move ahead, taking commerce to new heights, or encouraging people to explore the world, our colleagues are constantly striving to uphold our powerful backing promise to our customers and each other every day. These beliefs have been our North Star for 170 years as our business transformed – from helping evacuate travelers during World Wars, to ensuring the safety of our customers’ funds during the Great Depression in the U.S., to creating the Shop Small® movement to help small businesses recover from the Financial Crisis, to providing aid to communities impacted by many natural disasters and so much more. For generations, the key to our success has been the determination and resilience of our American Express colleagues. Now, as a globally integrated payments company, we work together to provide customers with access to products, insights and world-class experiences that enrich lives and build business success. Join us and let’s lead the way together.







.png)