Data Privacy Analyst III - Privacy Operations
Expedia Group
Gurgaon, Haryana, India
JOB DESCRIPTION If you need assistance during the recruiting process due to a disability, please reach out to our Recruiting Accommodations Team through the Accommodation Request form . This form is used only by individuals with disabilities who require assistance or adjustments in applying and interviewing for a job. This form is not for inquiring about a position or the status of an application. Data Privacy Analyst III - Privacy Operations Our worldview at Expedia Group is “Travel is a force for good”; we believe travel is a force for good in the world. You don’t have to look too closely to realize right now that t he world needs all the goodness it can get - it needs more travel.And with that as our worldview, the work we do at Expedia Group becomes more important than ever. The Expedia Security & Privacy (ESP) team is seeking a highly motivated, collaborative, and passionateData Privacy Analyst - Privacy Operations, with a practical self-starter mindset to elevate privacy operations throughout Expedia Group.The role conducts day-to-day operations for a variety of privacy processes, including Privacy Impact Assessments (PIA), Record of Processing Activities (ROPA), consent management, privacy notice analysis and validating data mappings. You will work to identify and measure risks and formulate recommendations for improvements to our data privacy operations. To be successful, you are organized, resourceful, possess domain knowledge on privacy and security compliance and have a “can-do” attitude. You will be a key member of our privacy and security governance, risk, and compliance team and responsible for tactical management of the Privacy Operations function, interpreting complex legislation (including international), and providing consultative services to the business and shared services. This role will report to the Senior Manager - Privacy Operations. While the person in this role should have a solid understanding of technology and data protection, it will reach across the company and should be able to translate business and technology. We believe diversity and inclusion among our teammates produces better results and is critical to our success as a global company and are committed to recruiting, developing, and retaining the most talented people from a diverse candidate pool. What you'll do: Support the Privacy team to shape and influence a culture of privacy throughout Expedia Group (EG) through campaigns, communication, training, and key knowledge sharing Assist to implement a best-in-class global privacy program, guiding the execution and refinement of privacy operational processes across the business Perform risk assessments, audits, and tests to ensure our systems and processes remain in compliance with applicable regulation and internal policies Ensure controls aligned to the privacy framework are implemented and monitored Partner with EG Product and Technology, Brands, Data Governance, and Legal teams to further embed privacy by design into our products and services Partner with EG privacy legal team to strengthen our measurable and scalable processes for demonstrating privacy compliance, including impact assessments (Privacy, Data Transfer, and Data Protection); Records of processing activities; Data maps; Responses to data subject access requests Identify, drive, and manage data & privacy governance maturation, including mapping policies, standards, guidelines, and controls against internationally recognized data and privacy standards such as ISO, and NIST CSF & Privacy by Design Create training, including content development, delivery, tracking, and execution Creates written reports and dashboards for monitoring compliance and communicating status with business leaders and stakeholders Perform other duties as assigned Who you are: 6+ years of overall corporate work experience Bachelor’s degree in a related technical field; or equivalent related professional experience or 4+ years of relevant experience (privacy, security, risk and/or governance) International & US privacy laws and regulations experience In-depth understanding of security/privacy policies, principles, and technologies; as well as familiarity with security and privacy control frameworks Advanced degree with a focus in Informationtechnology/management,risk, or audit Technical writing experience Experience with DPIA, PIA, TIA, ROPA, DSAR, RTBF, Data Maps, cookie consent management, data use review Prior experience with technologies such as OneTrust, Collibra, MetricStream, BigID, RSA Archer, Alation IAPP CIPP, CIPM, CIPT, ISACA certification(s) Operations management background About Expedia Group Expedia Group (NASDAQ: EXPE) powers travel for everyone, everywhere through our global platform. Driven by the core belief that travel is a force for good, we help people experience the world in new ways and build lasting connections. We provide industry-leading technology solutions to fuel partner growth and success, while facilitating memorable experiences for travelers. Expedia Group's family of brands includes: Brand Expedia®, Hotels.com®, Expedia® Partner Solutions, Vrbo®, trivago®, Orbitz®, Travelocity®, Hotwire®, Wotif®, ebookers®, CheapTickets®, Expedia Group™ Media Solutions, Expedia Local Expert®, CarRentals.com™, and Expedia Cruises™. © 2021 Expedia, Inc. All rights reserved. Trademarks and logos are the property of their respective owners. CST: 2029030-50 Employment opportunities and job offers at Expedia Group will always come from Expedia Group’s Talent Acquisition and hiring teams. Never provide sensitive, personal information to someone unless you’re confident who the recipient is. Expedia Group does not extend job offers via email or any other messaging tools to individuals to whom we have not made prior contact. Our email domain is @expediagroup.com. The official website to find and apply for job openings at Expedia Group is careers.expediagroup.com/jobs . Expedia iscommittedto creating an inclusive workenvironmentwith a diverse workforce. All qualified applicants will receive consideration for employment without regard to race, religion, gender, sexual orientation, national origin, disability or age.
