Manager - Product Management (Data Security)

At American Express, our culture is built on a 175-year history of innovation, shared values and Leadership Behaviors, and an unwavering commitment to back our customers, communities, and colleagues. From delivering differentiated products to providing world-class customer service, we operate with a strong risk mindset, ensuring we continue to uphold our brand promise of trust, security, and service.

As part of Team Amex, you'll experience this powerful backing with comprehensive support for your holistic well-being and many opportunities to learn new skills, develop as a leader, and grow your career. Here, your voice and ideas matter, your work makes an impact, and together, you will help us define the future of American Express.

Role Summary

American Express is seeking an experienced Manager, Product Management to lead the strategy, roadmap, and delivery of a portfolio of enterprise data security capabilities.

This role is responsible for defining and evolving a cohesive product strategy across key data security domains, including:

• Encryption (payment and non-payment)
• Data Security Posture Management (DSPM)
• Data Activity Management (DAM)
• Data Loss Prevention (DLP)

You will operate at the intersection of security, data, and technology, driving alignment across engineering, risk, compliance, and business stakeholders. This role requires a strong product mindset, the ability to manage complex capability portfolios, and a deep understanding of how to deliver scalable, measurable security outcomes.

Key Responsibilities

Product Strategy & Vision

• Define and maintain a clear product vision and strategy for enterprise data security capabilities
• Develop and manage a multi-year roadmap aligned to organizational priorities, regulatory requirements, and emerging risks
• Evolve the portfolio toward modern, data-centric security models, including DSPM and AI-driven environments

Portfolio & Capability Management

• Manage a portfolio of data security capabilities across encryption, DSPM, DAM, and DLP
• Define capability boundaries, integration points, and end-to-end operating models
• Ensure alignment and interoperability across capabilities to avoid fragmentation and duplication

Outcome Measurement: KPIs & KRIs Ownership

• Define, implement, and continuously refine key performance indicators (KPIs) and key risk indicators (KRIs) across the data security portfolio
• Establish measurable outcomes across core dimensions, including:
  • Coverage & Visibility (e.g., % of sensitive data discovered and classified)
  • Control Effectiveness (e.g., reduction in exception rates for unprotected sensitive data)
  • Operational Efficiency (e.g., time to detect and remediate data security issues)
  • Adoption & Consumption (e.g., increase in usage of DSPM, DAM, DLP capabilities across the enterprise)
• Drive improvement in critical metrics such as:
  • Reduction in data security exception rates (e.g., unencrypted, unmonitored, or non-compliant sensitive data)
  • Increase in capability consumption and integration rates across applications and platforms
• Partner with engineering and risk teams to ensure metrics are:
  • Technically measurable and reliable
  • Aligned to actual risk reduction (not just activity)
  • Reportable at both operational and executive levels
• Develop and maintain executive-level dashboards and reporting to track progress, highlight risks, and inform prioritization

Stakeholder Alignment & Governance

• Partner with engineering, cybersec