Applications for this job have closed. Try searching for similar jobs.

Security Compliance Analyst III

Expedia Group

Location: Chicago, Illinois, Seattle, Washington

Job Type: Full time


If you need assistance during the recruiting process due to a disability, please reach out to our Recruiting Accommodations Team through the Accommodation Request form. This form is used only by individuals with disabilities who require assistance or adjustments in applying and interviewing for a job. This form is not for inquiring about a position or the status of an application.

Security Compliance Analyst

Expedia Group Security and Privacy (ESP) is seeking a highly motivated, collaborative, and technically expert Security Compliance Analyst who has solid experience documenting security policy or equivalent control frameworks. You will act as a primary security policy SME, responsible for driving security standards revisions, identifying gaps, and bringing the standards and controls up to date with current industry benchmarks while balancing compliance requirements, business needs, and risk.

Must effectively write, establish, and communicate security requirements at a senior level.

Your knowledge and experience in NIST CSF, ISO 27001, ISO 27018, FedRAMP, PCI, SSAE 18, or SOC 2 will be an asset.

What you’ll do:

  • Write, edit, maintain, and support security policies and standards

  • Evaluate requirements and controls for design, effectiveness, and gaps

  • Assist with security policy exception requests, reviews, and monitoring

  • Represent security policy to business

  • Support compliance initiatives and projects as needed

  • Understand the business organizational structure and culture to best attain objectives and results

Who you are:

  • 4+ years of experience in information security, risk, compliance, governance, or privacy required

  • Experience writing or managing security policy is strongly preferred

  • Strong writing and communication background

  • Strong familiarity with technology, data security, and data privacy concepts

  • Strong ability to explain and defend a position to internal and external stakeholders

  • Strong sense of ownership and urgency

The total cash range for this position in Seattle is $104,000 to $145,500 . Employees in this role have the potential to increase their pay up to $166,500, which is the top of the range, based on ongoing, demonstrated, and sustained performance in the role.


The total cash range for this position in Chicago is $95,500.00 to $134,000.00. Employees in this role have the potential to increase their pay up to $153,000.00, which is the top of the range, based on ongoing, demonstrated, and sustained performance in the role.

Starting pay for this role will vary based on multiple factors, including location, available budget, and an individual’s knowledge, skills, and experience. Pay ranges may be modified in the future.

Expedia Group is proud to offer a wide range of benefits to support employees and their families, including medical/dental/vision, paid time off, and an Employee Assistance Program. To fuel each employee’s passion for travel, we offer a wellness & travel reimbursement, travel discounts, and an International Airlines Travel Agent (IATAN) membership.View our full list of benefits.

About Expedia Group

Expedia Group (NASDAQ: EXPE) powers travel for everyone, everywhere through our global platform. Driven by the core belief that travel is a force for good, we help people experience the world in new ways and build lasting connections. We provide industry-leading technology solutions to fuel partner growth and success, while facilitating memorable experiences for travelers. Expedia Group's family of brands includes: Brand Expedia®,®, Expedia® Partner Solutions, Vrbo®, trivago®, Orbitz®, Travelocity®, Hotwire®, Wotif®, ebookers®, CheapTickets®, Expedia Group™ Media Solutions, Expedia Local Expert®,™, and Expedia Cruises™.

© 2021 Expedia, Inc. All rights reserved. Trademarks and logos are the property of their respective owners. CST: 2029030-50

Employment opportunities and job offers at Expedia Group will always come from Expedia Group’s Talent Acquisition and hiring teams. Never provide sensitive, personal information to someone unless you’re confident who the recipient is. Expedia Group does not extend job offers via email or any other messaging tools to individuals to whom we have not made prior contact. Our email domain is The official website to find and apply for job openings at Expedia Group is

Expedia is committed to creating an inclusive work environment with a diverse workforce. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status. This employer participates in E-Verify. The employer will provide the Social Security Administration (SSA) and, if necessary, the Department of Homeland Security (DHS) with information from each new employee's I-9 to confirm work authorization.