Information Security Analyst - Data Privacy Management

$85,000 - $150,000/Yr

American Express - New York, NY

Full-time - Mid Level

New York, NY

Credit Intermediation and Related Activities

About the position

The Information Security Analyst - Data Privacy Management role at American Express focuses on implementing and managing privacy risk monitoring, notification, remediation, and reporting. The position is integral to the Data Risk Management Team, which aims to enhance technology and data risk management by embedding data governance into core activities. The analyst will collaborate with various teams to identify and mitigate risks, particularly those related to AI and Gen AI, while ensuring compliance with key regulations such as GDPR and CCPA.

Responsibilities

• Implement Privacy Risk monitoring, notification, remediation and reporting.
• Support and deliver against privacy risk management goals, best practices, and risk mitigation strategies.
• Act as a subject matter expert (SME) within the first line risk function.
• Collaborate with Global Privacy Oversight.
• Identify and support mitigation of risk, including AI and Gen AI related risks, to guide the business.
• Support creation and maintenance of key metrics and dashboard to ensure internal and external stakeholders remain informed on progress and deliverables.

Requirements

• 3-5 years' experience in a Risk Management/Compliance/Audit role or a highly regulated domain.
• Experience in Privacy risk management and familiarity with key regulations including GDPR and CCPA.
• Demonstrated ability to manage risk and deliver initiatives to advance the maturity and soundness of the control environment.
• Excellent written and verbal communication and presentation skills, able to create compelling arguments and influence across all levels of the organization.
• Excellent relationship building skills to partner effectively across diverse, cross-functional teams in complex and rapidly changing environments.
• Strong problem-solving and analytical skills, with strong learning agility and willingness to embrace change.
• Working knowledge of privacy risk identification, assessment, and management frameworks, including designing and implementing privacy related controls preferred.
• Experience working in a highly controlled environment and supporting policies and procedures preferred.
• Bachelor's Degree in related field.
• CISM, CISA, CRISC, CISSP or equivalent privacy certifications preferred.

Benefits

• Dental insurance
• Health insurance
• Life insurance
• Paid parental leave
• Parental leave
• Retirement plan
• Vision insurance