Senior Director of Governance, Risk, Compliance & Privacy, Expedia Group

$244.5-342k

Salary shown applicable to Seattle. Employees in this role have the potential to increase their pay up to $391,000.00, which is the top of the range, based on ongoing, demonstrated, and sustained performance in the role

AWS

Senior and Expert level

London

Online travel shopping company

Be an early applicant

Online travel shopping company

1001+ employees

B2CHospitalityB2BTravelMarketplaceTransportFlightseCommerce

Be an early applicant

$244.5-342k

AWS

Senior and Expert level

London

1001+ employees

B2CHospitalityB2BTravelMarketplaceTransportFlightseCommerce

Company mission

Expedia's mission is to power global travel for everyone, everywhere.

Job

Company

Role

Who you are

Experience leading a large and diverse globally distributed team
Must have well developed change management skills; be effective in working across organizational boundaries to build a case for changes, and to execute on the change plan from strategy through to ongoing operation and continuous process improvement
Knowledge of current security controls and landscape including traditional data center and cloud computing platforms (preferably AWS)
Experienced in, and able to formulate, the effectiveness and benefits of security compliance and certification initiatives in the context of overall business risk mitigation, security posture, and the company’s operational objectives
Demonstrated knowledge of security industry standards, privacy regulations, compliance testing and leading practices (e.g. PCI, OWASP, NIST, CIS, PCI, GDPR)
Familiar with third-party risk management processes, including vendor security assessments, contract reviews, and remediation tracking

What the job involves

The Enterprise Information Security team is seeking a strategic leader to drive world-class governance, regulatory alignment, and compliance across Expedia Group’s technology and business environments
This role is essential in embedding cybersecurity, risk management practices and privacy across the organization, grounded in frameworks such as NIST Cybersecurity Framework and ISO/IEC 27001
Responsibilities include PCI-DSS certification, SOC2 attestation, CCPA and GDPR compliance, enterprise-wide policy development and enforcement, and oversight of Enterprise Information Security (EI) contract language
Partnering closely with both technology and business stakeholders, this role will drive long-term compliance initiatives, promote sustainable risk reduction, and mature Expedia Group’s global security posture through actionable governance and operational excellence
Lead and drive a team of 40+ Security Analyst and Compliance Experts partnering and collaborating with business and technology teams to develop actionable solutions for security compliance, certifications, and governance
Work closely with product management to prioritize and establish roadmap for the team and provide oversight for the creation, revision, implementation, and compliance of security directives, policies, procedures, and controls and own and evolve privacy and compliance programs aligned to global regulations such as GDPR, CCPA, and SOX
Drive risk identification, mitigation strategies, and control effectiveness through ongoing risk assessments, third-party reviews, and continuous control monitoring and coordinate and respond to internal and external audits, including PCI, SOC2, ISO 27001, and regulatory assessments and develop and maintain scalable processes for control testing, evidence collection, and audit readiness across all environments
Ensure alignment with industry standards and frameworks such as NIST CSF, ISO/IEC 27001, and PCI-DSS and lead third-party risk management activities, including vendor onboarding reviews, ongoing risk assessments, and contractual security requirements

Application process

End Date: May 23, 2025

Salary benchmarks

Our take

Expedia is an online travel agency. They enable users to access a wide range of services including airline tickets, hotel reservations, car rentals, cruises, vacation packages, and various attractions and services via the world wide web and telephone travel agents. Its primary web businesses include Expedia.com, Hotels.com, Hotwire.com, and Egencia.com.

Between 2021 and 2022, Expedia has been selling and merging a list of its sub-brands in a bid to simplify its operations, including Egencia and Classic Vacations. Due to plummeting share prices, mostly in the case of its sub-brands, Expedia has been leveraging its subsidiaries' customer base and merging them into the company’s core brand. Contrasting this move, Expedia has also been partnering with tech start-ups in a bid to make travel more accessible to underserved groups. Becoming Rentable, a travel company for the disabled is one of 12 startups that are part of Expedia Group’s new Open World Accelerator Programme.

What this indicates is Expedia’s shift from buying other travel companies and a move towards enhancing the experience of its preexisting customer base. This move is aiding in a long-term plan for greater long-term traveler loyalty, utilizing Expedia’s vast amounts of data, not just from reviews, but from check-in, cleanliness, communication, cancelations, etc to inform how guests experience a property.

Steph

Company Specialist at Welcome to the Jungle

Insights

Top investors

9% employee growth in 12 months

Glassdoor (3.9)

Company

Company benefits

Leisure Travel Reimbursement
Travel Discounts
Family & Friends Discount
Employee Assistance Program
Wellness Reimbursement
Global Service Awards
Business Travel Medical Insurance
Matching Gifts
Expert Medical Opinion
New Parent Benefit
Employee Stock Purchase Plan
Private Health Insurance

Company HQ

Interbay, Seattle, WA

Leadership

Peter M. Kern

(CEO, not founder)

Has been a director of Expedia Group since completion of the IAC/Expedia Group Spin-Off and has served as Vice Chairman of Expedia Group since June 2018. Previously CEO of Tribune Media and Managing Partner of InterMedia Partners VII, LP, a private equity firm.

Share this job

View 23 more jobs at Expedia Group