Director of Cybersecurity, Privileged Access Management

Job DescriptionJoining Amex Tech means discovering and shaping your contribution to something big. Here, you can work alongside talented tech teams and build a unique career with the Powerful Backing of American Express. With a range of opportunities to work with the latest technologies, and a commitment to back the broader engineering community through open source, our mission is to power your success. Because Amex Tech is powered by our technology, our culture, and our colleagues.The Technology organization enables and accelerates the company’s growth strategies, delivering global capabilities and services in support of Amex’s customers and colleagues, while maintaining 24/7 servicing and availability to ensure an uninterrupted, high-quality customer experience. Technology provides the foundation for everything we do in the company while driving differentiation through building and leveraging innovative technology and data insights.At American Express, our mission is to deliver the world’s best customer experience every day. At the heart of this mission is our Information Security organization, enabling exceptional experiences built on a foundation of trust, service, and security. We leverage advanced technologies and data-driven insights to stay ahead of an evolving threat landscape. We foster a culture of passion, curiosity, and courage—empowering you to innovate, grow, and help shape the future of a Fortune 100 company.Trust. Service. Security.Director, Cybersecurity provides leadership and guidance to senior cybersecurity colleagues, leading high-performing teams in the strategic development and enterprise-wide implementation of robust cybersecurity frameworks and strategies. Position leads the Privilege Access Management (PAM) team within Identity and Access Management (IAM) and is focused on delivering enterprise controls regarding access to critical infrastructure and applications.ResponsibilitiesOversees and mentors teams in Cybersecurity to foster a culture of continuous learning, growth opportunities, and inclusivityManages resource allocation, project timelines, and budgets to ensure alignment of cybersecurity projects with organizational goalsCollaborates with senior leadership to hire top talent and implement strategies for talent retention and professional development, ensuring a high-functioning and cohesive teamDrives strategic initiatives in cybersecurity, managing risk and ensuring compliance with global standards and regulatory requirementsLeads responses to complex security and operational events, coordinating with cross-functional teams to mitigate impacts, analyze root causes, and prevent recurrencesDevelops, enforces, and innovates advanced security policies, procedures, and standards to maintain compliance and champion a culture of security awareness and proactive risk managementDevelops and drives strategies for vulnerability management, integrating comprehensive assessments or penetration testing into risk management practicesEnsures the effectiveness of security controls through regular audits, assessments, or metricsMaintains relationships with external partners and regulatory bodies to stay updated on the latest cybersecurity trends and regulatory requirementsEngages and influences stakeholders across the organization to prioritize and implement critical security recommendationsCollaborates and co-creates effectively with teams in product and the business to align technology initiatives with business objectivesLeading a team of professionals in architecting and operating Privilege Access Management controls across the enterprise.Establishing a vision and then leading the team to transform Privilege Access Management through the implementation of Agentic AI within PAM controls. QualificationsBachelor's degree in Computer Science, Information Systems, Cybersecurity, and/or comparable experience; advanced degree preferredKnowledge of security frameworks and best practicesKnowledge of Network Security and Application SecurityKnowledge of Threat ModelingKnowledge of Identity & Access Management (IAM)Knowledge of Cloud Security ManagementKnowledge of global regulatory requirements and industry standards for cybersecurityKnowledge of Data Security ManagementKnowledge of network protocols (e.g., TCP/IP, DNS, HTTP) and security fundamentalsKnowledge of Security Architecture ManagementKnowledge of Security Governance and OperationsKnowledge of Security Testing & RemediationKnowledge of Data EngineeringKnowledge of scripting languages such as Python, Bash, or PowerShell for automating security tasksKnowledge of cybersecurity technologies, risk management, threat intelligence, and incident responseTechnical expertise in multiple relevant technologies, with knowledge of enterprise architecture frameworks, cybersecurity protocols, and operational best practicesWork Experience:Experience in a cybersecurity senior leadership roleExperience in leadership and mentorship roles, with the ability to foster a culture of continuous learning and professional developmentExperience in designing and implementing advanced security architectures in large, complex organizationsExperience collaborating with senior leadership to align security strategies with business goalsExperience in common Privilege Access Management tools: Password vaults, session managers, authZ controls at the server level.Experience in engineering solutions using Generative or Agentic AI. This includes the use of agents to automate functions, development of custom GPTs to speed assessments and audit responses, and more.Licenses And CertificationsCertified Information Systems Security Professional (CISSP)Certified Information Security Manager (CISM)Depending on factors such as business unit requirements, the nature of the position, cost and applicable laws, American Express may provide visa sponsorship for certain positions.