Data Privacy Analyst III

Our worldview at Expedia Group is “Travel is a force for good”; we believe travel is a force for good in the world. You don’t have to look too closely to realize right now thatthe world needs all the goodness it can get - it needs more travel.And with that as our worldview, the work we do at Expedia Group becomes more important than ever.

The Expedia Security & Privacy (ESP) team is seeking a highly motivated, collaborative, and passionateData Privacy Analyst, with a practical self-starter mindset to advise and embed privacy by design in our products and user experiences.The role helps the business assess and document our compliance and risk posture related to legal and ethical use of the data that we collect and maintain. You will help mature our data privacy and compliance program by assisting with policy development and data subject rights processes, along with validating data mappings, inventories, and data flows. You will work to identify and measure risks and formulate recommendations for improvements to our data privacy program.

To be successful, you are organized, resourceful, possess domain knowledge on privacy and security compliance and have a “can-do” attitude. You will be a key member of our privacy and security governance, risk, and compliance team and responsible for strategic and tactical management of the Privacy function, interpreting complex legislation (including international), and providing consultative services to the business and shared services. This role will report to the Senior Manager - Privacy Program.

While the person in this role should have a solid understanding of technology and data protection, it will reach across the company and should be able to translate business and technology. We believe diversity and inclusion among our teammates produces better results and is critical to our success as a global company and are committed to recruiting, developing, and retaining the most talented people from a diverse candidate pool.

What you'll do:

• Support the Privacy team to shape and influence a culture of privacy throughout Expedia Group (EG) through campaigns, communication, training, and key knowledge sharing

• Assist to design and implement a best-in-class global privacy program and guide the execution, implementation, and scaling of the program across the business

• Perform risk assessments, audits, and tests to ensure our systems and processes remain in compliance with applicable regulation and internal policies

• Partner with EG Product and Technology, Brands, Data Governance, and Legal teams to further embed privacy by design into our products and services

• Partner with EG privacy legal team to strengthen our measurable and scalable processes for demonstrating privacy compliance, including impact assessments (Privacy, Data Transfer, and Data Protection); Records of processing activities; Data maps; Responses to data subject access requests

• Identify, drive, and manage data & privacy governance maturation, including mapping policies, standards, guidelines, and controls against internationally recognized data and privacy standards such as ISO, and NIST CSF & Privacy by Design

• Create training, including content development, delivery, tracking, and execution

• Creates written reports and dashboards for monitoring compliance and communicating status with business leaders and stakeholders

• Perform other duties as assigned

Who you are:

• 6+ years of overall corporate work experience with bachelor's degree

• 4+ years of relevant experience with an advanced degree with a focus in information technology/management, risk, or audit preferred

• Privacy and/or security risk management or compliance management related experience preferably in technology, software as a service, or cloud

• In-depth understanding of security/privacy policies, principles, and technologies; as well as familiarity with security and privacy control frameworks

• Excellent communication, interpersonal, organizational, and writing skills, including plan status, results, and presentations

• Solutions-oriented team player, with a track record of identifying and implementing creative solutions anddemonstrated project management and organizational skills

• International & US privacy laws and regulations experience

• IAPP CIPP certification(s) a plus, other certifications desired from ISACA et. al

• Technical skills and expertise to manage information systems and manage compliance tools and processes that enable privacy compliance and incident tracking and reporting (e.g., MetricStream, RSA Archer, OneTrust GRC, etc.)

• Experience overseeing the operational aspects of a risk, privacy and/or compliance program, such as developing and/or implementing systems and processes for:

  • DPIA, PIA, TIA, ROPA, DSAR, Data Maps

  • Third party risk management

  • Due diligence

  • Training

  • Risk assessments

#LI-MY2

The total cash range for this position in Austin is $104,000 to $145,500. Employees in this role have the potential to increase their pay up to $166,500 which is the top of the range, based on ongoing, demonstrated, and sustained performance in the role.

The total cash range for this position in Chicago is $95,500 to $134,000. Employees in this role have the potential to increase their pay up to $153,000, which is the top of the range, based on ongoing, demonstrated, and sustained performance in the role.

The total cash range for this position in Seattle is $104,000.00 to $145,500.00. Employees in this role have the potential to increase their pay up to $166,500.00, which is the top of the range, based on ongoing, demonstrated, and sustained performance in the role.

Starting pay for this role will vary based on multiple factors, including location, available budget, and an individual’s knowledge, skills, and experience. Pay ranges may be modified in the future.

Expedia Group is proud to offer a wide range of benefits to support employees and their families, including medical/dental/vision, paid time off, and an Employee Assistance Program. To fuel each employee’s passion for travel, we offer a wellness & travel reimbursement, travel discounts, and an International Airlines Travel Agent (IATAN) membership.View our full list of benefits.

Expedia iscommittedto creating an inclusive workenvironmentwith a diverse workforce. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status. This employer participates in E-Verify. The employer will provide the Social Security Administration (SSA) and, if necessary, the Department of Homeland Security (DHS) with information from each new employee's I-9 to confirm work authorization.