- Lead initiatives to improve enterprise data security compliance and control effectiveness
- Partner with application, engineering, and architecture teams to create automation, tools, and materials that increase adoption of data security capabilities and secure design practices
- Modernize data security compliance review processes through automation, workflow optimization, and AI-enabled solutions
- Lead data security exception request reviews and identify opportunities to reduce exception rates
- Develop and maintain operational metrics, dashboards, and reporting to measure program effectiveness and support risk management
- Support the design, implementation, and continuous improvement of security capabilities
- Coordinate and lead Data Security audit response activities, including timely responses, response materials, and remediation of findings
- Collaborate with cross-functional teams to deliver scalable, efficient, and user-friendly data security capabilities
- Mentor team members and contribute to continuous improvement of team processes, standards, and technical capabilities
Requirements
- 10+ years of experience in cybersecurity, data security, or security engineering within a large enterprise
- Solid understanding of data protection technologies, cloud security, secure application development, and security architecture principles
- Strong experience with security governance, risk management, compliance, and participating in audit processes
- Experience driving process transformation, automation, and workflow modernization using scripting, APIs, or AI-enabled technologies
- Strong analytical, problem-solving, and stakeholder management skills
- Ability to influence technical teams and drive cross-functional initiatives
- Practical experience with cloud platforms, DevSecOps practices, and security automation tools
- Employment eligibility to work with American Express in the United States is required; the company will not pursue visa sponsorship
- Relevant certifications such as CISSP, CISM, CCSP, or equivalent are a plus
Core Competencies
Demonstrates extensive experience in cybersecurity and data security, with a focus on compliance, risk management, and automation. Proven ability to lead cross-functional initiatives and mentor teams while driving process improvements and implementing security capabilities.
Highest-signal resume keywords
- Cybersecurity Experience
- Data Security Compliance
- Security Governance
- Cloud Security
- Security Automation Tools
ATS Optimization Keywords
Hard Skills
- Data Protection Technologies
- Secure Application Development
- Security Architecture Principles
- Process Transformation
- Workflow Modernization
- Scripting
- APIs
- AI-Enabled Technologies
- Analytical Skills
- Problem-Solving
Soft Skills
- Stakeholder Management
- Influencing Technical Teams
Certifications & Qualifications
- CISSP
- CISM
- CCSP
Industry Keywords
- Data Security Audit
- Risk Management
- Compliance
- Automation
- Continuous Improvement
Tools & Technologies
- Cloud Platforms
- DevSecOps Practices