Manager Risk Management H/F

International Card Services (ICS) brings together our International Consumer and Small & Medium Size Enterprises (SME) issuing activities, as well as our Commercial Large Market sales and account development teams. ICS issues Cards in 27 countries, and is responsible for two Joint Ventures covering around a dozen countries. The leaders in these countries are empowered to make decisions at a local level, in partnership with other local business leaders. Local teams are supported by two cross-market teams – the Centre of Excellence, and Risk & Control Management. Privacy is one of the defining issues of our time. American Express is accountable for safeguarding the information assets of American Express from unauthorized access or use, and for protecting the privacy of our customers, colleagues and third parties International Privacy Risk Management (IPRM) is a first line team designed to accelerate American Express’ progress in achieving sustainable and effective compliance with the evolving Privacy regulations in International, across business units and legal entities. ICS Regulatory Advisory, Conduct & Governance sits within International Card Services (ICS) which comprises of all the issuing functions across all 28 international markets excluding the US - colleagues operate across a variety of geographies and disciplines. ICS issues products to our Consumer and Commercial customers – the organization is an integral part of the global growth strategy for American Express; offering differentiated products and services is critical to our success and promises to drive significant growth and value through the delivery of innovative products, tailored to the needs of our customers. Reporting to the Director, International Privacy Risk Management, this role will support the evolution of high-quality Privacy risk management standards and practices across International and increase awareness of privacy standards, controls, regulations, and industry best practice. This role requires strong operations and risk management skills, as well as excellent relationship management abilities with the ability to impact and influence at all levels, often without direct authority. It will involve extensive collaboration with multiple partners across numerous business units, and jurisdictions. This role will predominantly support Amex legal entities in France and requires fluency in French and English.

Privacy A dvice and Guidance: Provides expert interpretation of privacy requirements and helps teams apply them in practical business scenarios. Privacy Risk Assessment: Identifies, documents, and evaluates privacy risks across processes, systems, products and vendors. Privacy Controls & Governance: Applies the IPRM privacy control framework to be executed by 1st line risk experts. Training and Awareness: Proactively engages and partners with stakeholders across Compliance and the business to create learning and development programs and guidance material to support colleagues to understand their roles and responsibilities in relation to privacy Risk Management: Monitors the external regulatory and industry development to determine impacts to framework. Identifies potential gaps and best practice in AXP’s data privacy framework and helps to develop implementable solutions that can be rolled out across International. Audit Engagement: Supports the business in managing privacy audits. Provide and recommend pre-audit submissions of self-identified findings, monitor all audit MAPs to ensure they are closed in a timely manner, participate in all audit meetings, and provide operational risk input into audit findings. Supports the business in response to Privacy Operational Risk Events and Issues.

Experience in Privacy Risk Management, Operational Excellence, Compliance, Operational Risk or a related discipline Experience in implementing privacy requirements into business practices (processes & procedures), with an understanding of processes and information flows for business and operational units that manage customer personal data and other confidential information Demonstrates a will to win, to deliver change in a challenging environment Strong analytical skills and rigor, able to source and interpret data in a meaningful way to present a compelling story and support decision making Strong verbal and written communication skills, with an ability to craft messages that clearly and succinctly communicate key messages for internal and external audiences at all levels of the organization Must be able to work well with different areas of the organization, building strong relationships & establishing trust through predictable delivery Highly skilled at influencing without direct authority, to drive progress towards critical outcomes Preferred qualifications Ability to thrive in a fast paced and fluid business environment. Experience of working with geographically dispersed colleagues across multiple lines of businesses Fluent in French and English, other languages an advantage Existing established network of relationships with key stakeholders such as Compliance teams in France, as well as key product & tech partners an advantage Proven experience of working in a legal & regulatory environment with tight deadlines, changing information and ambiguity. Knowledge of privacy regulation and records retention and deletion practices preferred Non-considerations for sponsorship: Employment eligibility to work with American Express in France is required as the company will not pursue visa sponsorship for these positions.