Director, Program Management

The Program Management team at Expedia Group partners with product, engineering and platform teams to deliver secure and compliant experiences for travelers, partners and employees. This role focuses on security, risk and compliance programs across the organization. Responsibilities Lead the planning, execution, and delivery of complex, cross‑functional security and risk programs that align with Expedia Group’s strategic, regulatory and compliance objectives. Define, operationalize and continuously improve program management frameworks, standards and governance for security, risk and compliance initiatives across multiple business and technology domains. Partner with senior engineering, security, risk, legal and business leaders to prioritize portfolios and roadmaps, manage trade‑offs, and ensure programs are delivered on time, within scope and with clearly defined outcomes. Drive end‑to‑end program transparency through robust metrics, status reporting, dependency, risk and issue management, and effective stakeholder communication up to executive levels and governance forums. Ensure security and risk programs incorporate data‑driven decision making, including use of dashboards, KPIs and analytics to track program health, control effectiveness and inform continuous improvement. Safely integrate and operate AI/ML‑enabled solutions and AI‑driven workflows within program management practices to improve security posture, risk detection and operational efficiency, applying AI/ML concepts to real‑world products. Minimum Qualifications Bachelor’s degree in a relevant field such as Computer Science, Information Systems, Engineering, Cybersecurity or related discipline, or equivalent practical experience. Significant experience leading large‑scale, multi‑team or multi‑domain programs in security, risk management or compliance within a technology or product‑driven organization. Demonstrated ownership of complex security and risk program portfolios spanning multiple services or domains, with clear accountability for roadmap execution, risk mitigation and stakeholder alignment. Proven expertise in core program management disciplines, including program planning, dependency and risk management, change management and executive‑level communication in security and risk contexts. Preferred Qualifications Experience leading global security and risk programs operating at significant scale, coordinating across multiple regions, business units and technology platforms. Track record of establishing or evolving security and risk program governance models, operating mechanisms and metrics frameworks that improve operational excellence and overall security posture. Demonstrated ability to use data, analytics and tooling to proactively identify risks, drive prioritized remediation and measure the effectiveness of security and risk initiatives across services and domains. Familiarity with AI‑driven systems, tools or workflows in the security and risk domain, including applying AI/ML concepts to real‑world security, fraud or risk products and safely integrating AI/ML‑enabled solutions that improve detection, prevention and response. Benefits Medical, dental and vision coverage. Paid time off and flexible work arrangements. Employee Assistance Program and wellness resources. Travel reimbursement and discounts. International Airlines Travel Agent Network membership. Comprehensive benefits package supportive of employees and families. Pay range: Total cash range for this position in Seattle is $231,000.00 to $323,500.00, with potential for increased pay up to $369,500.00 based on performance. Equal Opportunity. Expedia is committed to creating an inclusive work environment with a diverse workforce. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, veteran status or any other characteristic protected by law. Expedia participates in E‑Verify. #J-18808-Ljbffr 11105 Expedia, Inc.