Job Description
The Integral Risk & Compliance (GRC) organization serves as American Express' independent risk management function. American Express Global Privacy Oversight (GPO) team is a Second Line of Defense (2LoD) function that provides independent oversight, effective challenge, and privacy risk expertise across the enterprise. GPO partners with business and control functions to promote a strong culture of privacy, drive compliance with internal policies and regulatory requirements, and ensure privacy risks are appropriately identified, assessed, managed, and mitigated. This position, based in Spain, reports to the Digital Privacy Director. The successful candidate will be passionate about Digital Privacy, Technology Services and tooling's, Artificial Intelligence (AI), and Emerging Technologies, with strong privacy subject matter expertise. The role will primarily provide Second Line of Defense oversight and effective challenge over ETS-led digital products, systems, platforms, AI use cases, and emerging technology initiatives, ensuring privacy risks are effectively identified, assessed, managed, and mitigated in line with enterprise risk management expectations. Provide independent privacy risk oversight, strategic guidance, and consultation to American Express businesses globally, with a particular focus on Digital Privacy, Systema and Platform, AI, and Emerging Technologies. Support the monitoring, analysis, and reporting of privacy key risk indicators and other privacy risk management data. Review and challenge privacy risk assessments, control design, and mitigation strategies implemented by the First Line of Defense, particularly for digital initiatives, AI solutions, and emerging technology deployments.



Partner with Compliance and other stakeholders to oversee privacy legal and regulatory change management activities. Five years of experience in Privacy, with particular focus on emerging Technologies. Experience or demonstrated interest in Digital Privacy, Artificial Intelligence (AI), and/or Emerging Technology risk management. Master's degree or equivalent in Data Protection and Privacy. Data Protection and Privacy Professional Certification (e.
Prior work in Compliance, Audit/or Risk management at a Digital Technology and/or financial services company preferred. Employment eligibility to work with American Express in Spain is required as the company will not pursue visa sponsorship for these positions. At American Express, our culture is built on a 175-year history of innovation, shared values and Leadership Behaviors, and an unwavering commitment to back our customers, communities, and colleagues. From delivering differentiated products to providing world-class customer service, we operate with a strong risk mindset, ensuring we continue to uphold our brand promise of trust, security, and service. Support for financial-well-being and retirement Comprehensive medical, dental, vision, life insurance, and disability benefits (depending on location) Flexible working model with hybrid, onsite or virtual arrangements depending on role and business need Free access to global on-site wellness centers staffed with nurses and doctors (depending on location) Career development and training opportunities Offer of employment with American Express is conditioned upon the successful completion of a background verification check, subject to applicable laws and regulations.

📌 Compliance Manager (España)
🏢 American Express
📍 España