Data Security Digital Product Manager - Gen AI/ Agile

Joining Amex Tech means discovering and shaping your contribution to something big. Here, you can work alongside talented tech teams and build a unique career with the Powerful Backing of American Express. With a range of opportunities to work with the latest technologies, and a commitment to back the broader engineering community through open source, our mission is to power your success. Because Amex Tech is powered by our technology, our culture, and our colleagues. The Technology organization enables and accelerates the company’s growth strategies, delivering global capabilities and services in support of Amex’s customers and colleagues, while maintaining 24/7 servicing and availability to ensure an uninterrupted, high-quality customer experience. Technology provides the foundation for everything we do in the company while driving differentiation through building and leveraging innovative technology and data insights. At American Express, our mission is to deliver the world’s best customer experience every day. At the heart of this mission is our Information Security organization, enabling exceptional experiences built on a foundation of trust, service, and security. We leverage advanced technologies and data-driven insights to stay ahead of an evolving threat landscape. We foster a culture of passion, curiosity, and courage—empowering you to innovate, grow, and help shape the future of a Fortune 100 company. Trust. Service. Security. The Data Security team is responsible for safeguarding the organization’s most critical asset—its data—by ensuring confidentiality, integrity, and availability across all platforms and environments. Working at the intersection of cybersecurity, data governance, and privacy, the Data Security team focuses on capabilities such as data classification, encryption, secure data access, and monitoring. The team partners closely with engineering, risk, and business units to embed security controls throughout the data lifecycle—from creation and storage to sharing and archival. As a Product Owner, you will lead the development of platforms and capabilities that enable internal teams to securely leverage enterprise data encryption services. This role focuses on building and enhancing a services portal for encryption solutions, as well as products that integrate with Hardware Security Modules (HSMs). You will play a critical role in shaping the direction of encryption products—driving innovation, accelerating AI adoption, improving automation, and enhancing the efficiency and scalability of security services across the organization. You will champion the responsible use of AI across the product lifecycle, identifying opportunities to improve customer experiences, streamline engineering workflows, and enable secure AI-powered capabilities within enterprise security platforms. You should have strong product mindset with the ability to translate complex technical capabilities into scalable, user-focused solutions. How will you make an impact in this role? The Product Owner is accountable for translating product direction into precise, executable work while ensuring strong alignment with engineering delivery and measurable outcomes. This role emphasizes disciplined backlog management, clear prioritization, and consistent execution patterns to improve delivery predictability, reduce fragmentation, and enhance overall product quality. You will act as the voice of the customer and the steward of execution excellence—ensuring that encryption services are delivered securely, reliably, and with a high degree of operational rigor. This role also plays a key part in enabling the evolution of the platform to support AI-driven use cases—ensuring that encryption services are accessible, intuitive, and scalable for both human users and intelligent systems. The Product Owner will incorporate AI capabilities into product development in a disciplined, execution-focused manner, aligning innovation with secure, reliable delivery. Core Responsibilities Cryptographic Product Strategy • Define the product direction for HSM services, key-management capabilities, encryption services, and supporting developer tools. • Identify customer and application needs related to cryptographic operations, key custody, secure integration, automation, and service accessibility. • Develop roadmaps that address platform modernization, HSM lifecycle management, capacity, resilience, crypto-agility, and regulatory requirements. • Establish standardized cryptographic services and integration patterns that can be reused across application teams. • Evaluate new HSM, key-management, cloud cryptography, automation, and related technologies for practical enterprise adoption. • Key Management and HSM Delivery • Define product requirements for key generation, import, export, distribution, rotation, backup, recovery, revocation, archival, and destruction. • Guide capabilities involving HSM partitions, security domains, access controls, quorum processes, administrative roles, audit logging, and operational monitoring. • Ensure requirements account for secure key custody, separation of duties, least privilege, traceability, and recoverability. • Partner with infrastructure and engineering teams on HSM deployment, configuration, migration, expansion, upgrade, and decommissioning initiatives. • Prioritize lifecycle and operational work alongside new product capabilities. Developer Experience and Programming • Define APIs, SDK requirements, code samples, onboarding documentation, test utilities, and integration guidance for cryptographic-service consumers. • Collaborate with engineers to validate that user stories accurately describe expected cryptographic behavior, error handling, access controls, and nonfunctional requirements. • Apply working programming knowledge to review implementation examples, analyze defects, support proof-of-concept activities, and clarify integration requirements. • Promote automat