Training & Awareness Analyst III (Security and Privacy)

If you need assistance during the recruiting process due to a disability, please reach out to our Recruiting Accommodations Team through the Accommodation Request form. This form is used only by individuals with disabilities who require assistance or adjustments in applying and interviewing for a job. This form is not for inquiring about a position or the status of an application.

Training & Awareness Analyst III (Security and Privacy)

Are you a highly motivated, experienced & curious training and awareness professional who can address the challenges of increasing our security, Privacy posture across Expedia Group (EG)? Can you play a supporting role in an enterprise-wide security risk and compliance program, collaborate cross functionally to support critical initiatives? Do you have the discipline to deliver results with a strong passion for ownership and driving change?

Expedia Security and Privacy (ESP) is seeking an experienced Training & Awareness Analyst III to be critical trusted advisor to our Security and Privacy team. As a key supporting team member within the Governance, Risk, Compliance & Privacy (GRCP) team, this role will be responsible for partnering to expand our Training & Awareness capabilities across the company.

Beyond possessing experience with training and awareness you are organized, resourceful and able to build strong relationships and trust across the enterprise. In this role, you will demonstrate your ability to support a complex and changing environment, analyze and think out-of-box. Your knowledge and experience with security frameworks compliance initiatives, training and awareness activities, and communications will be an asset.

What you'll do:

• Support the execution of Security & Privacy Training at Expedia Group

• Draft and manage critical companywide communications while partnering with the enterprise learning and communication teams to ensure critical information is provided to Expedia Group employees

• Coordinate with various auditor and audit teams on training and awareness activities

• Establish credibility and maintain strong working relationships with stakeholders and partners in order to understand enterprise objectives, initiatives, and issues related to the training and awareness activities

• Partner with Expedia Group’s threat intelligence, physical security, and cyber defense teams to determine the most critical needs for security training

• Serve as an internal trusted advisor providing best practices for security education

• Ensure timely and accurate dissemination of security and privacy-related information to all stakeholders

• Report and communicate status and metrics to stakeholders and partners in a consistent voice and format

• Establish credibility and maintain strong working relationships with stakeholders and partners to understand enterprise objectives, initiatives

• Gather feedback from employees and stakeholders and adjust training content accordingly

Who you are:

• Bachelor's degree in a related field, or equivalent related professional experience

• Over 3+ years’ experience in a communications, and or training and awareness

• Experience in information security, risk, compliance, or privacy preferred

• Excellent written and verbal communication skills

• Strong presentation and public speaking abilities

• Detail-oriented and organized, with a commitment to accuracy and thoroughness

• Adept at project management and meeting deadlines

• Enthusiastic about educating and raising awareness within the organization

• Ability to work both independently and as part of a team

• Knowledge of enterprise cybersecurity management practices, governance, and risk/compliance assessment methodologies preferred

• An understanding of Information Security frameworks, processes, technologies, and practices, including NIST and ISO27xxx standards

• Knowledge of regulatory and industry frameworks such as NIST, ISO, PCI, SOC2

• Information Security or Project Management Certification(s) such as PMP, CISSP, CRISC, CISA, CISM, Security + or similar certifications helpful

The total cash range for this position in Chicago is $95,500 to $134,000. Employees in this role have the potential to increase their pay up to $153,000, which is the top of the range, based on ongoing, demonstrated, and sustained performance in the ro