Director-Privacy

American Express; Madrid; Presencial; EUR 120.000 - 170.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Competitive base salaries

Bonus incentives

Comprehensive medical, dental, vision

Flexible working model

Parental leave policies

Wellness centers and counseling

Descripción de la vacante

American Express seeks a senior privacy risk leader based in Madrid to guide the Global Privacy Oversight function and partner with the Global Risk & Compliance organization. You will drive risk assessment processes, challenge control environments, and influence privacy governance in a complex regulatory landscape.

The role requires extensive experience in privacy risk management, strong leadership, and the ability to collaborate with cross-functional partners across the enterprise in a

Formación

• 10+ years’ experience in Risk Management/Compliance/Audit or a highly regulated domain.
• Extensive experience in Privacy risk management with GDPR/CCPA and emerging AI regulations.
• Demonstrated ability to manage risk strategically and drive improvements in control environments.
• Excellent written and verbal communication skills across all levels of the organization.
• Strong relationship-building skills to partner across cross-functional teams in complex environments.
• Outstanding problem-solving and analytical abilities with learning agility and adaptability.
• Experience leading diverse teams to deliver results.

Responsabilidades

• Lead a team of Privacy experts to achieve privacy risk management goals and mitigate risks.
• Support the business through Privacy Risk Assessments and mitigation planning.
• Provide privacy guidance and ongoing second-line oversight to pro-actively address risks.
• Enhance governance and capabilities of the Global Privacy Oversight function.
• Promote a strong control environment and drive improvements to common controls.
• Build collaborative relationships with First Line, risk, compliance, security, legal and others to spread privacy best practices.
• Contribute as a key member of VP International’s Leadership team and influence internal and external stakeholders.

Conocimientos

Privacy risk management

Regulatory knowledge (GDPR/CCPA)

AI regulation familiarity

Stakeholder management

Leadership

Communication skills

Descripción del empleo

Job Description

The Global Risk & Compliance (GRC) organization serves as American Express’ independent risk management function. GRC maintains the enterprise risk framework, provides oversight and challenge, and monitors key risks. By embedding risk discipline into strategy and operations, GRC enables responsible growth, innovation, and long‑term value creation while protecting customers and shareholders.

The American Express Global Privacy Oversight function provides trusted advice on the American Express Data Protection & Privacy Principles. We work to raise privacy awareness, drive compliance with both internal privacy policies and regulatory expectations across the organization and establish privacy as a strategic differentiator for the American Express brand. As a second line of defense function, Global Privacy Oversight oversees, provides expertise in, and challenges the identification, management, and mitigation of privacy risks across the company in line with the privacy framework and the company’s vision to provide the world’s best customer experience every day.

This position, based in Madrid, Spain, is part of the Global Risk and Compliance Organization - a second line of defense risk oversight function responsible for the independent management of privacy risk globally. The role will report directly into the VP International Privacy, located in Madrid, Spain. The successful candidate will deploy a combination of extensive privacy expertise and a strong understanding of Artificial Intelligence to support the Global Privacy Office to deliver on business-critical strategic objectives.

Responsibilities

• Lead a team of Privacy experts to accomplish privacy risk management goals, best practices and risk mitigation strategies.
• Support the business through Privacy Risk Assessments identifying and supporting mitigation of risks.
• Provide privacy guidance, credible challenge and ongoing second line oversight to pro-actively identify and address risks.
• Uplift the Global Privacy Oversight function´s governance and capabilities.
• Champion a consistently strong control environment, and influence the continued enhancement of common controls.
• Build strong, collaborative relationships with First Line Business Unit partners, risk oversight functions, compliance, operational excellence, information security, legal and many others to drive privacy best practices throughout the enterprise.
• Key member of VP International´s Leadership team, able to engage and influence internally and externally.

Qualifications

Minimum Qualifications

• 10+ years’ experience in Risk Management/Compliance/Audit role or a highly regulated domain.
• Extensive experience in Privacy risk management, and familiarity with key regulations including GDPR, CCPA and emerging AI regulations.
• Demonstrated ability to manage risk strategically and tactically and deliver initiatives to advance the maturity and soundness of the control environment.
• Excellent written and verbal communication skills, able to create compelling arguments and influence across all levels of the organization.
• Excellent relationship building skills to partner effectively across diverse, cross-functional teams in complex and rapidly‑changing environments.
• Outstanding problem‑solving and analytical skills, with strong learning agility and willingness to embrace and lead through change.
• Experience leading, engaging and motivating hardworking and diverse teams through complexities to deliver results.

Preferred Qualifications

• Relevant IAPP certifications.
• Familiarity with AI regulation, in place and emerging, globally.
• Experience working in a highly controlled environment and governing supporting policies and procedures.

Employment eligibility to work with American Express in Spain is required as the company will not pursue visa sponsorship for these positions.

About Us

At American Express, our culture is built on a 175-year history of innovation, shared values and Leadership Behaviors, and an unwavering commitment to back our customers, communities, and colleagues. From delivering differentiated products to providing world‑class customer service, we operate with a strong risk mindset, ensuring we continue to uphold our brand promise of trust, security, and service.

As part of Team Amex, you’ll experience our powerful backing with comprehensive support for your holistic well‑being and many opportunities to learn new skills, develop as a leader, and grow your career. Here, your voice and ideas matter, your work makes an impact, and together, you will help us define the future of American Express.

About The Team

We back you with benefits that support your holistic well‑being so you can be and deliver your best. This means caring for you and your loved ones' physical, financial, and mental health, as well as providing the flexibility you need to thrive personally and professionally:

• Competitive base salaries
• Bonus incentives
• Support for financial‑well‑being and retirement
• Comprehensive medical, dental, vision, life insurance, and disability benefits (depending on location)
• Flexible working model with hybrid, onsite or virtual arrangements depending on role and business need
• Generous paid parental leave policies (depending on your location)
• Free access to global on‑site wellness centers staffed with nurses and doctors (depending on location)
• Free and confidential counseling support through our Healthy Minds program
• Career development and training opportunities

Offer of employment with American Express is conditioned upon the successful completion of a background verification check, subject to applicable laws and regulations.