FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Manager – Control Management
American Express. Partner closely with Regulatory Advisory & Practices (RAP) to identify, assess, and monitor privacy risks associated with business processes, products, systems, and third-party relationships .
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in privacy risk management, including the design and implementation of risk controls, compliance with privacy regulations such as GDPR and CCPA, and the ability to assess and mitigate privacy risks across business processes. Strong analytical and communication skills are essential for influencing stakeholders and promoting a culture of proactive risk management.
Highest-signal resume keywords
Operational Risk ManagementPrivacy Regulations KnowledgeRisk And Control FrameworksPrivacy Risk AssessmentsProfessional Certifications
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Risk ManagementPrivacy Risk ControlsControl TestingData GovernanceData ClassificationPrivacy Incident ManagementRisk Mitigation StrategiesControl Design EvaluationRCSA ProcessesPrivacy Risk Dashboards
Soft Skills
Analytical SkillsProblem-SolvingCommunication SkillsStakeholder ManagementInfluencing Skills
Tools & Technologies
GRC PlatformsArcherServiceNow GRCOneTrust
Certifications & Qualifications
CIPP/USCIPMCRISCCISACRMP
Industry Keywords
BankingFinancial ServicesPaymentsHighly Regulated IndustriesThree-Lines-Of-Defense Model
Tech Stack
Tools & technologiesServiceNow
About the role
Key responsibilities & impact- Partner closely with Regulatory Advisory & Practices (RAP) to identify, assess, and monitor privacy risks associated with business processes, products, systems, and third-party relationships
- Design, implement, and enhance privacy risk controls to mitigate regulatory, operational, and reputational risks
- Support Risk and Control Self-Assessments (RCSAs) and privacy risk assessments
- Evaluate inherent and residual privacy risks and determine whether existing controls adequately mitigate exposure
- Assess risks associated with personal data collection, processing, sharing, retention, and deletion
- Partner with business process owners to develop risk mitigation strategies
- Evaluate control design and operating effectiveness
- Identify control gaps, process weaknesses, and opportunities for control enhancements
- Ensure controls are supported by appropriate documentation, ownership, procedures, and evidence
- Support control standardization and automation initiatives
- Translate privacy requirements into operational controls and business processes
- Develop privacy risk dashboards and management information reporting
- Monitor trends in privacy incidents, control failures, and assessment results
- Serve as a privacy risk and control subject matter resource for business stakeholders
- Promote a culture of proactive privacy risk identification, accountability, and continuous control improvement
Requirements
What you’ll need- 3+ Years experience in operational risk management (e.g., within Risk and/or Internal Audit function)
- Understanding of critical operational risk management lifecycle activities
- Experience with risk and control frameworks, RCSA processes, and control testing
- Knowledge of privacy regulations, including GDPR, CCPA/CPRA, and GLBA
- Experience managing risk issues, remediation plans, and audit findings
- Strong analytical, problem-solving, communication, and stakeholder management skills
- Ability to influence cross-functional teams and communicate risk matters to senior leadership
- Bachelor’s degree in finance, Business, Risk Mgmt., or related field is preferred
- Advanced degrees (e.g., MBA, MSc) or certifications are advantageous
- Experience in banking, financial services, payments, or other highly regulated industries
- Professional certifications such as CIPP/US, CIPM, CRISC, CISA, or CRMP
- Familiarity with GRC platforms such as Archer, ServiceNow GRC, or OneTrust
- Experience with enterprise risk management and three-lines-of-defense models
- Knowledge of data governance, data classification, data retention, and privacy incident management
Benefits
Comp & perks- Competitive base salaries
- Bonus incentives
- Support for financial well-being and retirement
- Comprehensive medical, dental, vision, life insurance, and disability benefits (depending on location)
- Flexible working model with hybrid, onsite or virtual arrangements depending on role and business need
- Generous paid parental leave policies (depending on your location)
- Free access to global on-site wellness centers staffed with nurses and doctors (depending on location)
- Free and confidential counseling support through our Healthy Minds program
- Career development and training opportunities