Data Protection Operations Lead, Airbnb
$129-152k
More information about location
Community marketplace for holiday accomodation
Open for applications
Community marketplace for holiday accomodation
1001+ employees
Open for applications
$129-152k
More information about location
1001+ employees
Company mission
To create a world where anyone can belong anywhere.
Role
Who you are
- 8+ years of hands-on experience with Access and Privileged Access Management (PAM) operations in a technology-driven environment
- Demonstrated experience in PAM operational tasks, including safe creation and management, privileged account onboarding, policy development, and least-privilege access model implementation
- Solid background in identity and access management (IAM) principles and industry best practices
- Experience with operationalizing Just-In-Time (JIT) privilege models, role-based access controls (RBAC), and enforcing Segregation of Duties (SoD)
- Working knowledge of authentication protocols (e.g., SAML, OAuth, OpenID Connect, Active Directory, LDAP, Kerberos)
- Familiarity with cloud-based privileged access management, including the classification and management of non-human identities (service accounts, API keys, etc.)
- Strong understanding of security standards and regulatory frameworks (NIST, ISO/IEC, FFIEC) relevant to access management
- Strong SQL abilities, including querying and dashboard creation
- Clear, concise communication skills, with a proven ability to collaborate across engineering, security, product, and operational teams without a technical background to drive alignment and best-in-class solutions
- Experience in documenting policies, procedures, and reporting on PAM-related risk and compliance metrics
- Demonstrated ownership and accountability for continuous improvement in PAM controls and risk management
- Proactive in identifying and mitigating security risks related to privileged access
- Comfortable working in a fast-paced environment and contributing to cross-functional or global initiatives
- Demonstrated ability to build and coach teams
- Familiarity with access management challenges specific to cloud-native environments (AWS, GCP, Azure)
- Involvement in developing or maintaining Privileged Access Management strategies that address both human and non-human identities, including business users, developers, and service accounts
What the job involves
- The strategic goal of the Risk and Compliance Operations team is to focus on creating the standardized operational security processes and protocols in order to ensure there is proper Risk Governance and Compliance for Community Support teams in specific domains, including product, process, and engineering in accordance with company policies and contractual agreements
- As a key member of our team, you’ll drive operational excellence, foster innovation, and champion security and productivity
- You’ll play a pivotal role in designing and maintaining provisioning frameworks, collaborating with engineering partners to optimize permission models and tooling, and balancing speed with robust security across all processes
- Your expertise will be essential in leading cross-functional Customer Support initiatives, securing alignment, and building strategic partnerships with teams like InfoSec, Partner Management, Legal, and Privacy to advance our mission
- Develop and execute improvement roadmaps
- Manage projects for implementing new security and privacy controls
- Lead process enhancements and optimize access controls
- Define audit and reporting mechanisms for both internal and vendor teams
- Deliver best-in-class privacy and data protection for Operations
- You’ll be joining a newly formed team with the rare opportunity to shape its culture and direction—bringing vision, leadership, and an entrepreneurial spirit as our team grows
- Governance & Reporting: Measure, report, and govern privileged access controls to ensure compliance
- Requirements & Implementation: Document and translate PAM (Privileged Access Management) requirements for technology partners, supporting efficient, modern, and sustainable solutions
- Stakeholder Collaboration: Work cross-functionally to develop and iterate on PAM requirements across Process, Data, and Technology domains
- Policy & Standards: Partner with the policy governance team to socialize and publish updates to the PAM Standard
- Authentication & Security: Apply your mastery of authentication platforms (Active Directory, LDAP, Kerberos, Radius) and PAM principles (JIT provisioning) to make recommendations to policy and provisioning processes and technology teams
- Regulatory Compliance: Ensure alignment with industry regulations and standards (NIST, ISO/IEC, FFIEC), particularly within financial services
- Risk Management: Proactively identify, assess, and mitigate PAM risks, driving continuous improvement and accountability
- Stakeholder Engagement: Report on existing and emerging PAM/information security risks to senior leadership with transparency and clarity
- Quality Assurance: Design and execute thorough test strategies for privileged access processes, collaborate on defect resolution, and recommend improvements for usability, resilience, and security
- Documentation: Maintain clear, comprehensive records of policies, approval processes, and test outcomes
- Industry Engagement: Stay up-to-date with emerging trends and best practices in privileged access management
- Access Management policies: Define and maintain access management policies for different user personas (admin, developer, user, viewer)
- Leadership: Coach and train team members, ensuring accurate and efficient Human in the Loop processes
- Access lifecycle: Oversee the full lifecycle of access (create, edit, delete, view, hide, etc.). Build and refine abstractions to inform access decisions, considering:
- User roles/personas
- Tenant or organizational affiliation
- Privileges assigned via specific permissions or group memberships
Our take
When Airbnb was originally founded, the product helped customers book air mattresses on people's apartment floors. Since then, Airbnb has had over a billion customers hosted through its platform. With more than 4 million registered hosts worldwide, it has grown into a major player in the hospitality sector.
Airbnb has been successful in disrupting the traditional holiday lettings sector. Before it existed accommodation was limited to hotels and bed and breakfasts, but Airbnb has mainstreamed the idea of renting out spare rooms or even entire homes. It has created a new sector of hosts purchasing properties to rent out on the platform and provides a level of flexibility and a range of offerings not previously possible for travelers.
Perhaps a victim of its own success, by 2022 supply of Airbnb-listed properties began to outstrip demand in some markets, as hosts overestimated the appetite for domestic travel. However, the company is still posting strong financials and has unveiled new tools to support its hosts in a tougher rental market. With a healthy bottom line and a huge user base, Airbnb is very likely to overcome the current market turbulence and continue its growth.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
25% employee growth in 12 months
Company
Funding (last 2 of 10 rounds)
Apr 2020
$500m
GROWTH EQUITY VC
Mar 2017
$447.8m
SERIES F
Total funding: $3.8bn
Company benefits
- Paid volunteer time
- Health food and snacks
- Generous parental and family leave
- Learning and development
- Annual travel and experiences credit
Company HQ
Showplace Square, San Francisco, CA
Leadership
Brian Chesky
(Co-Founder & CEO)Previously an Industrial Designer, studying at Rhode Island School of Design.
Nathan Blecharczyk
(Co-Founder & CSO)Studied Computer Science at Harvard, and had around 4 years of professional Software Engineering experience before founding Airbnb, including interning at Microsoft.
Joe Gebbia
(Co-Founder)Also studied Industrial Design at Rhode Island, and previously founded various design-related startups
Share this job
View 93 more jobs at Airbnb