Senior Manager, Security Compliance (SOC 2)

Are you a highly motivated, collaborative and technically experienced Senior Manager for Security Compliance ready to join Expedia Group Security's (EGS) Governance, Risk and Compliance (GRC) group? Do you understand cloud operational and security processes, effectively build, establish and communicate security controls, and support changes within the organization through effective development and testing?

To be successful, you'll be organized, inventive, possess domain knowledge on security compliance and have a “can-do” attitude. You will be a key member of our GRC team and play a key role in building out the SOC 2 compliance program. In this role, you will demonstrate ability to analyze hard problems, think out-of-box and provide pragmatic solutions and recommendations. Along with your knowledge of SOC 2, your experience security compliance frameworks in (NIST CSF, ISO 27001, etc.) will be an asset!

What you'll do:

• Evaluate the design efficiency of SOC 2 controls based upon industry standard methodology models in accordance with compliance requirements

• Participate in external certification and drive our partner audit events, including preparation, sample delivery, and onsite facilitation

• Assist in the analysis and definition of security requirements and help with ongoing maintenance and support of security controls

• Providing consulting services to Expedia Group on Expedia Group Security policy & standards and SOC 2 controls

• Lead and own the development of complex, multi-functional compliance and audit related projects

• Aid in defining audit scope and objectives, involving all relevant partners

• Drive appropriate meeting cadence required to achieve and maintain for a successful internal/external third-party audit

• Facilitate efficient communication across all levels of an audit to ensure consistency in reaching the audit's goals, and to help in the recognition of any potential opportunities, risks, or complications

• Hold business partners accountable for timely and quality execution of objectives

• Devise efficient and effective communication to SOC 2 stakeholders

• Present recommendations, options, opportunities, and assumptions to leadership

Who you are:

• A minimum of 6 years job related experience, working in a regulated environment, in SOC 2 compliance or other related compliance program

• Demonstrated expertise managing a compliance audit and partners

• Information Security Certification(s) with demonstrated work experience preferred. Desired certifications include: CISA, CISP, ISA/PCIP

• Knowledge and familiarity related to coordinating and securing operating systems, database platforms, endpoint security and network infrastructure is preferred

• Experience with methodologies related to network architecture & security controls (routers, firewalls, networking protocols, etc)

• Ability to recognize/analyze/and document deficiencies and articulate those to both technical and non-technical key management personnel

• Experience using a risk-based audit approach in evaluations of and recommendations for management processes

• An understanding of Information Security frameworks, processes, technologies, and practices, including NIST and ISO27xxx standards

#LI-MY2

The total cash range for this position in Austin is $134,500 to $188,000. Employees in this role have the potential to increase their pay up to $215,000, which is the top of the range, based on ongoing, demonstrated, and sustained performance in the role.

Starting pay for this role will vary based on multiple factors, including location, available budget, and an individual’s knowledge, skills, and experience. Pay ranges may be modified in the future.

Expedia Group is proud to offer a wide range of benefits to support employees and their families, including medical/dental/vision, paid time off, and an Employee Assistance Program. To fuel each employee’s passion for travel, we offer a wellness & travel reimbursement, travel discounts, and an International Airlines Travel Agent (IATAN) membership.View our full list of benefits.