Director, Program Management

Expedia•Seattle, WA

24d

About The Position

Expedia Group is a global travel company that connects travelers, partners, and advertisers through its consumer brands, B2B network, and travel advertising business. The Program Management team works across Expedia Group to create innovative products, services, and tools to deliver high-quality experiences for travelers, partners, and employees. This role involves leading complex, cross-functional security and risk programs, defining and improving program management frameworks, and partnering with senior leaders to prioritize roadmaps and ensure timely delivery. The position emphasizes data-driven decision making and the integration of AI/ML-enabled solutions within program management practices to enhance security posture and operational efficiency.

Requirements

Bachelor’s degree in a relevant field (such as Computer Science, Information Systems, Engineering, Cybersecurity, or related discipline) or equivalent practical experience.
Significant experience leading large-scale, multi-team or multi-domain programs in security, risk management, or compliance within a technology or product-driven organization.
Demonstrated ownership of complex security and risk program portfolios spanning multiple services or domains, with clear accountability for roadmap execution, risk mitigation, and stakeholder alignment.
Proven expertise in core program management disciplines, including program planning, dependency and risk management, change management, and executive-level communication in security and risk contexts.

Nice To Haves

Experience leading global security and risk programs operating at significant scale, including coordinating across multiple regions, business units, and technology platforms.
Track record of establishing or evolving security and risk program governance models, operating mechanisms, and metrics frameworks that improve operational excellence and overall security posture.
Demonstrated ability to use data, analytics, and tooling to proactively identify risks, drive prioritized remediation, and measure the effectiveness of security and risk initiatives across services and domains.
Familiarity with AI-driven systems, tools, or workflows in the security and risk domain, including applying AI/ML concepts to real-world security, fraud, or risk products and safely integrating AI/ML‑enabled solutions that improve detection, prevention, and response.

Responsibilities

Lead the planning, execution, and delivery of complex, cross-functional security and risk programs that align with Expedia Group’s strategic, regulatory, and compliance objectives.
Define, operationalize, and continuously improve program management frameworks, standards, and governance for security, risk, and compliance initiatives across multiple business and technology domains.
Partner with senior engineering, security, risk, legal, and business leaders to prioritize portfolios and roadmaps, manage trade-offs, and ensure programs are delivered on time, within scope, and with clearly defined outcomes.
Drive end-to-end program transparency through robust metrics, status reporting, dependency, risk and issue management, and effective stakeholder communication up to executive levels and governance forums.
Ensure security and risk programs incorporate data-driven decision making, including the use of dashboards, KPIs, and analytics to track program health, control effectiveness, and inform continuous improvement.
Safely integrate and operate AI/ML‑enabled solutions and AI-driven workflows within program management practices to improve security posture, risk detection, and operational efficiency, including familiarity with AI-driven systems, tools, or workflows and applying AI/ML concepts to real world products.