Senior Privacy Manager

Expedia Group brands power global travel for everyone, everywhere. We design cutting-edge tech to make travel smoother and more memorable, and we create groundbreaking solutions for our partners. Our diverse, vibrant, and welcoming community is essential in driving our success.

Why Join Us?

To shape the future of travel, people must come first. Guided by our Values and Leadership Agreements, we foster an open culture where everyone belongs, differences are celebrated and know that when one of us wins, we all win.

We provide a full benefits package, including exciting travel perks, generous time-off, parental leave, a global hybrid work setup (with some pretty cool offices), and career development resources, all to fuel our employees' passion for travel and ensure a rewarding career journey. We’re building a more open world. Join us.

Senior Privacy Manager

Are you a highly motivated, experienced & curious security risk and compliance professional who can address the challenges of increasing our security posture across Expedia Group (EG)? Can you play a lead technical role in specific focus area?  Do you have the discipline to deliver results with a strong passion for ownership and driving change?

The Expedia Security & Privacy (ESP) team is seeking a highly motivated, collaborative, and passionate Senior Manager Privacy Programs - Operations, with a practical self-starter mindset to advise and embed privacy by design in our products and user experiences and lead our privacy operations team.

To be successful, you are organized, resourceful, possess domain knowledge on privacy and security compliance and have a “can-do” attitude. You will be a key member of our privacy and security governance, risk, and compliance team and responsible for strategic and tactical management of the Privacy function, interpreting complex legislation (including international), and providing consultative services to the business and shared services.

This role will report to the Director, Privacy Programs. The person in this role should have a solid understanding of technology and data protection and will reach across the company and should be able to translate business and technology. We believe diversity and inclusion among our teammates produces better results and is critical to our success as a global company and are committed to recruiting, developing, and retaining the most talented people from a diverse candidate pool.

This role requires someone to accommodate up to 3-4 hours of overlap with Pacific Time (7:30-11:30am PST) daily.

What you'll do:

• Support the Privacy team to shape and influence a culture of privacy throughout Expedia Group (EG) through effective and efficient operational processes

• Partner with the Director of Privacy to design and implement a best-in-class global privacy program and guide the execution, implementation, and scaling of the program across the business

• Partner with EG Product and Technology, Brands, Data Governance, and Legal teams to further embed privacy by design into our products and services

• Partner with EG privacy legal team to strengthen our measurable and scalable processes for demonstrating privacy compliance, including impact assessments (Privacy, Data Transfer, and Data Protection); Records of processing activities; Data maps; Responses to data subject access requests

• Identify, drive, and manage data & privacy governance maturation, including mapping policies, standards, guidelines, and controls against internationally recognized data and privacy standards such as ISO, and NIST CSF & Privacy by Design

• Partner with Security and HR on training, including content development, delivery, tracking, and execution

Who you are:

• 8+ years of overall corporate work experience with a bachelor’s degree or 5+ years of relevant experience (privacy, security, risk and/or governance)

• International & US privacy laws and regulations experience

• In-depth understanding of security/privacy policies, principles, and technologies; as well as familiarity with security and privacy control frameworks

• Preferred:

• Advanced degree with a focus in Information technology/management, risk, or audit

• Technical writing experience

• Experience with DPIA, PIA, TIA, ROPA, DSAR, RTBF, Data Maps, cookie consent management, data use review

• Prior experience with technologies such as OneTrust, Collibra, BigID

• IAPP CIPP, CIPM, CIPT certification(s)

• Operations management background

• Good To have- 2+ years people management

Accommodation requests

If you need assistance with any part of the application or recruiting process due to a disability, or other physical or mental health conditions, please reach out to our Recruiting Accommodations Team through the Accommodation Request.

We are proud to be named as a Best Place to Work on Glassdoor in 2024 and be recognized for award-winning culture by organizations like Forbes, TIME, Disability:IN, and others.

Expedia Group's family of brands includes: Brand Expedia®, Hotels.com®, Expedia® Partner Solutions, Vrbo®, trivago®, Orbitz®, Travelocity®, Hotwire®, Wotif®, ebookers®, CheapTickets®, Expedia Group™ Media Solutions, Expedia Local Expert®, CarRentals.com™, and Expedia Cruises™. © 2024 Expedia, Inc. All rights reserved. Trademarks and logos are the property of their respective owners. CST: 2029030-50

Employment opportunities and job offers at Expedia Group will always come from Expedia Group’s Talent Acquisition and hiring teams. Never provide sensitive, personal information to someone unless you’re confident who the recipient is. Expedia Group does not extend job offers via email or any other messaging tools to individuals with whom we have not made prior contact. Our email domain is @expediagroup.com. The official website to find and apply for job openings at Expedia Group is careers.expediagroup.com/jobs.

Expedia is committed to creating an inclusive work environment with a diverse workforce. All qualified applicants will receive consideration for employment without regard to race, religion, gender, sexual orientation, national origin, disability or age.