Data Privacy Analyst, Expedia Group
$166.5k
OTE
$104-145.5k
BASE
Salary is benchmarked on Seattle, WA area rates and may differ in other locations
Online travel shopping company
Job no longer available
Online travel shopping company
1001+ employees
Job no longer available
$166.5k
OTE
$104-145.5k
BASE
Salary is benchmarked on Seattle, WA area rates and may differ in other locations
1001+ employees
Company mission
Expedia's mission is to power global travel for everyone, everywhere.
Role
Who you are
- 6+ years of overall corporate work experience
- Bachelor’s degree in a related technical field; or equivalent related professional experience or 4+ years of relevant experience (privacy, security, risk and/or governance)
- International & US privacy laws and regulations experience (GDPR, CCPA, LGPD, etc.)
- In-depth understanding of security/privacy policies, principles, and technologies; as well as familiarity with security and privacy control frameworks (NIST, ISO)
- Advanced degree with a focus in Information technology/management, risk, or audit
- Technical writing experience
- Experience with DPIA, PIA, TIA, ROPA, DSAR, RTBF, Data Maps, cookie consent management, data use review
- Prior experience with technologies such as OneTrust, Collibra, MetricStream, BigID, RSA Archer, Alation IAPP CIPP, CIPM, CIPT, ISACA certification(s)
- Operations management background
What the job involves
- The Expedia Security & Privacy (ESP) team is seeking a highly motivated, collaborative, and passionate Data Privacy Analyst III, with a practical self-starter mindset to elevate privacy operations throughout Expedia Group
- The role conducts day-to-day operations for a variety of privacy processes, including Privacy Impact Assessments (PIA), Record of Processing Activities (ROPA), consent management, privacy notice analysis and validating data mappings
- You will work to identify and measure risks and formulate recommendations for improvements to our data privacy operations
- This role will report to the Director - Privacy Programs
- Shape and influence a culture of privacy throughout Expedia Group (EG) through campaigns, communication, training, and key knowledge sharing
- Implement a best-in-class global privacy program, guiding the execution and refinement of privacy operational processes across the business
- Perform risk assessments, audits, and tests to ensure our systems and processes remain in compliance with applicable regulation and internal policies
- Ensure controls aligned to the privacy framework are implemented and monitored
- Partner with EG Product and Technology, Brands, Data Governance, and Legal teams to further embed privacy by design into our products and services
- Partner with EG privacy legal team to strengthen our measurable and scalable processes for demonstrating privacy compliance, including impact assessments (Privacy, Data Transfer, and Data Protection); Records of processing activities; Data maps; Responses to data subject access requests
- Identify, drive, and manage data & privacy governance maturation, including mapping policies, standards, guidelines, and controls against internationally recognized data and privacy standards such as ISO, and NIST CSF & Privacy by Design
- Create training, including content development, delivery, tracking, and execution
- Creates written reports and dashboards for monitoring compliance and communicating status with business leaders and stakeholders
- Perform other duties as assigned
Salary benchmarks
Our take
Expedia is an online travel agency. They enable users to access a wide range of services including airline tickets, hotel reservations, car rentals, cruises, vacation packages, and various attractions and services via the world wide web and telephone travel agents. Its primary web businesses include Expedia.com, Hotels.com, Hotwire.com, and Egencia.com.
Between 2021 and 2022, Expedia has been selling and merging a list of its sub-brands in a bid to simplify its operations, including Egencia and Classic Vacations. Due to plummeting share prices, mostly in the case of its sub-brands, Expedia has been leveraging its subsidiaries' customer base and merging them into the company’s core brand. Contrasting this move, Expedia has also been partnering with tech start-ups in a bid to make travel more accessible to underserved groups. Becoming Rentable, a travel company for the disabled is one of 12 startups that are part of Expedia Group’s new Open World Accelerator Programme.
What this indicates is Expedia’s shift from buying other travel companies and a move towards enhancing the experience of its preexisting customer base. This move is aiding in a long-term plan for greater long-term traveler loyalty, utilizing Expedia’s vast amounts of data, not just from reviews, but from check-in, cleanliness, communication, cancelations, etc to inform how guests experience a property.
Steph
Company Specialist at Welcome to the Jungle
Insights
9% employee growth in 12 months
Company
Company benefits
- Leisure Travel Reimbursement
- Travel Discounts
- Family & Friends Discount
- Employee Assistance Program
- Wellness Reimbursement
- Global Service Awards
- Business Travel Medical Insurance
- Matching Gifts
- Expert Medical Opinion
- New Parent Benefit
- Employee Stock Purchase Plan
- Private Health Insurance
Company HQ
Interbay, Seattle, WA
Leadership
Peter M. Kern
(CEO, not founder)Has been a director of Expedia Group since completion of the IAC/Expedia Group Spin-Off and has served as Vice Chairman of Expedia Group since June 2018. Previously CEO of Tribune Media and Managing Partner of InterMedia Partners VII, LP, a private equity firm.
Share this job