Director Cybersecurity -Data Security Product Management (Data Security Posture Management, Data Protection)

At American Express, our culture is built on a 175-year history of innovation, shared values and Leadership Behaviors, and an unwavering commitment to back our customers, communities, and colleagues. As part of Team Amex, you'll experience this powerful backing with comprehensive support for your holistic well-being and many opportunities to learn new skills, develop as a leader, and grow your career.

We are seeking an experienced Director of Data Security Product Management to lead the strategy, development, and delivery of enterprise-grade data security capabilities across a complex, large-scale organization. This role is responsible for building and evolving a cohesive portfolio of data security products and platform capabilities that deliver clear, measurable enterprise value. That value is demonstrated through meaningful risk reduction, faster enablement of new business products and initiatives, and security solutions that are easy to implement, adopt, and operate at scale.

The ideal candidate has deep experience operating in highly regulated or security-conscious enterprise environments and brings a strong foundation in disciplined product management practices. They are adept at translating enterprise risk, compliance, and business needs into scalable, flexible product solutions. Experience in data security enablement areas such as encryption, key management, data protection, and access controls is highly desirable.

Key Responsibilities: 

• Define and own the long-term product vision, strategy, and roadmap for enterprise data security capabilities, ensuring alignment with business priorities, risk management objectives, and technology strategy
• Develop, manage, and mature a portfolio of complementary product capabilities that address current enterprise needs while providing modularity and flexibility to support future requirements
• Partner closely with engineering, architecture, risk, compliance, legal, and business stakeholders to assess needs, define outcomes, and translate those needs into clear, actionable product requirements
• Apply strong product rigor practices, including problem framing, outcome-based prioritization, dependency management, value measurement, and end-to-end product lifecycle management
• Ensure all solutions are enterprise-ready, with a focus on scalability, reliability, resilience, ease of implementation, and intuitive user experience for both technical and non-technical users
• Establish and track success metrics that clearly demonstrate the value delivered by the data security product portfolio, including reduced risk exposure, improved time to enablement, and operational efficiencies
• Evaluate emerging technologies, industry trends, and vendor capabilities to inform roadmap evolution, build-versus-buy decisions, and long-term product strategy

Qualifications:

• Bachelor’s degree in Computer Science, Engineering, or related technical field.
• 12–15+ years of overall professional experience, including 8–10+ years in senior product management or leadership roles within large enterprise organizations
• Proven experience building, scaling, and managing enterprise-grade product portfolios, preferably in data security, information security, data protection, or platform engineering domains
• Strong background in data security enablement, such as encryption, key management, data protection, access controls, or related security capabilities
• Exceptional ability in disciplined product management and product rigor practices, including assessing needs, defining outcomes, and prioritizing work based on enterprise value and risk reduction
• Demonstrated strength in designing scalable, modular, and interoperable product capabilities that can evolve to meet changing enterprise and regulatory needs
• Ability to balance near-term delivery with long-term strategic thinking, ensur