Senior Analyst-Control Management

American Express; Gurugram District; Hybrid; INR 1,200,000 - 2,100,000; Full time

Benefits offered by this job

Competitive base salaries

Bonus incentives

Comprehensive medical, dental, vision,

and disability benefits

Flexible working model with hybrid, on

Career development and training

Job summary

American Express is seeking a Sr Analyst of Privacy Risk Control to embed privacy risk management into day-to-day operations. You will collaborate across business units and geographies to strengthen the privacy control environment and framework.

The role involves extensive interaction with partners to ensure controls are effective and well-documented. You will translate privacy requirements into operational controls, support risk assessments, and monitor trends in incidents and control failures

Qualifications

• Minimum 2+ years in operational risk or internal audit functions.
• Knowledge of GDPR, CCPA/CPRA, GLBA and related privacy rules.
• Experience managing risk issues, remediation plans and audit findings.
• Strong analytical, communication and stakeholder management skills.
• Ability to influence cross-functional teams and communicate risk to senior leadership.

Responsibilities

• Partner with RAP to identify, assess and monitor privacy risks in processes, products and third parties.
• Design, implement and improve privacy risk controls to mitigate regulatory, operational and reputational risks.
• Support RCSAs and privacy risk assessments.
• Evaluate inherent and residual privacy risks and verify controls effectiveness.
• Assess risks related to data collection, processing, sharing, retention and deletion.
• Collaborate with process owners on risk mitigation strategies.
• Evaluate control design and operation performance.
• Identify gaps and opportunities for control enhancements.
• Ensure controls have documentation, ownership, and evidence.
• Support standardization and automation of controls.
• Translate privacy requirements into operational controls and processes.
• Develop privacy risk dashboards and management reporting.

Skills

Operational risk management

Privacy regulations (GDPR, CPRA/GLBA)

Risk issues remediation

Analytical, problem-solving, and Stake

Influence cross-functional teams and C

Education

Bachelor's degree in Finance/Business/Risk Mgmt.

Tools

Archer

ServiceNow GRC

OneTrust

Job description

Job Description

With the right backing, people and businesses have the power to progress in incredible ways. When you join Team Amex, you become part of a global and diverse community of colleagues with an unwavering commitment to back our customers, communities and each other. Here, you’ll learn and grow as we help you create a career journey that’s unique and meaningful to you with benefits, programs, and flexibility that support you personally and professionally.

At American Express, you’ll be recognized for your contributions, leadership, and impact-every colleague has the opportunity to share in the company’s success. Together, we’ll win as a team, striving to uphold our company values and powerful backing promise to provide the world’s best customer experience every day. And we’ll do it with the utmost integrity, and in an environment where everyone is seen, heard and feels like they belong.

Join Team Amex and let's lead the way together.

How we serve our customers is constantly evolving and is a challenge we gladly accept. Whether you’re finding new ways to prevent identity fraud or enabling customers to start a new business, you can work with one of the most valuable data sets in the world to identify insights and actions that can have a meaningful impact on our customers and our business. And, with opportunities to learn from leaders who have defined the course of our industry, you can grow your career and define your own path. Find your place in risk and analytics on #TeamAmex.

Credit & Fraud Risk is looking for a Sr Analyst of Privacy Risk Control focused on ensuring control management is embedded in the day-to-day operations of our organization. It will involve extensive collaboration with multiple partners across numerous business units, functional areas, and geographies to strengthen the organization's privacy risk management framework and control environment.

Responsibilities

• Partnering closely with Regulatory Advisory & Practices (RAP), identify, assess, and monitor privacy risks associated with business processes, products, systems, and third-party relationships
• Design, implement, and enhance privacy risk controls to mitigate regulatory, operational, and reputational risks
• Support Risk and Control Self-Assessments (RCSAs) and privacy risk assessments
• Evaluate inherent and residual privacy risks and determine whether existing controls adequately mitigate exposure
• Assess risks associated with personal data collection, processing, sharing, retention, and deletion
• Partner with business process owners to develop risk mitigation strategies
• Evaluate control design and operating effectiveness
• Identify control gaps, process weaknesses, and opportunities for control enhancements
• Ensure controls are supported by appropriate documentation, ownership, procedures, and evidence
• Support control standardization and automation initiatives
• Translate privacy requirements into operational controls and business processes
• Develop privacy risk dashboards and management information reporting
• Monitor trends in privacy incidents, control failures, and assessment results

Qualifications

Required Qualifications

• 2+ Years experience in operational risk management (e.g., within Risk and/or Internal Audit function) Understanding of critical operational risk management lifecycle activities
• Knowledge of privacy regulations, including GDPR, CCPA/CPRA, and GLBA
• Experience managing risk issues, remediation plans, and audit findings
• Strong analytical, problem-solving, communication, and stakeholder management skills
• Ability to influence cross-functional teams and communicate risk matters to senior leadership

Preferred Qualifications

• Bachelor's Degree in Finance, Business, Risk Mgmt., or related field; advanced degrees (e.g., MBA, MSc) or certifications are advantageous
• Experience in banking, financial services, payments, or other highly regulated industries
• Professional certifications such as CIPP/US, CIPM, CRISC, CISA, or CRMP
• Familiarity with GRC platforms such as Archer, ServiceNow GRC, or OneTrust
• Experience with enterprise risk management and three-lines-of-defense models
• Knowledge of data governance, data classification, data retention, and privacy incident management

About Us

At American Express, our culture is built on a 175-year history of innovation, shared values and Leadership Behaviors, and an unwavering commitment to back our customers, communities, and colleagues. From delivering differentiated products to providing world-class customer service, we operate with a strong risk mindset, ensuring we continue to uphold our brand promise of trust, security, and service.

About The Team

We back you with benefits that support your holistic well-being so you can be and deliver your best. This means caring for you and your loved ones' physical, financial, and mental health, as well as providing the flexibility you need to thrive personally and professionally:

• Competitive base salaries
• Bonus incentives
• Support for financial-well-being and retirement
• Comprehensive medical, dental, vision, life insurance, and disability benefits (depending on location)
• Flexible working model with hybrid, onsite or virtual arrangements depending on role and business need
• Generous paid parental leave policies (depending on your location)
• Free access to global on-site wellness centers staffed with nurses and doctors (depending on location)
• Free and confidential counseling support through our Healthy Minds program
• Career development and training opportunities

American Express is an equal opportunity employer and makes employment decisions without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran status, disability status, age, or any other status protected by law.

Offer of employment with American Express is conditioned upon the successful completion of a background verification check, subject to applicable laws and regulations.