Director, Program Management

At Expedia Group, we help travelers explore the world, one journey at a time. As a global travel company powered by passionate people, trusted partnerships, and leading technology, we connect travelers, partners, and advertisers through our consumer brands, B2B network, and travel advertising business.

Here, you'll do meaningful work that helps millions of people discover, book, and experience travel with more ease, confidence, and joy. Our five Behaviors-Traveler First, Think Big, Operate with Excellence, Ownership Mindset, and Succeed Together-help foster a supportive environment where people can grow their careers and have the flexibility, benefits, and support to do their best work. Join us and build for travelers everywhere.

Our Program Management team works across Expedia Group to create innovative products, services, and tools to deliver high-quality experience for travelers, partners, and our employees. A singular technology platform powered by data and machine learning provides secure, differentiated, and personalized experiences that drive loyalty and traveler satisfaction.
The Program Management team partners with product, engineering, and platform teams to ensure security and privacy are built into Expedia Group products by design, from ideation through operations. We enable our business partners to build resilient, future-ready solutions that advance Expedia Group's security posture and operational velocity.
 

In this role, you will:

• Lead the planning, execution, and delivery of complex, cross-functional security and risk programs that align with Expedia Group’s strategic, regulatory, and compliance objectives.
• Define, operationalize, and continuously improve program management frameworks, standards, and governance for security, risk, and compliance initiatives across multiple business and technology domains.
• Partner with senior engineering, security, risk, legal, and business leaders to prioritize portfolios and roadmaps, manage trade-offs, and ensure programs are delivered on time, within scope, and with clearly defined outcomes.
• Drive end-to-end program transparency through robust metrics, status reporting, dependency, risk and issue management, and effective stakeholder communication up to executive levels and governance forums.
• Ensure security and risk programs incorporate data-driven decision making, including the use of dashboards, KPIs, and analytics to track program health, control effectiveness, and inform continuous improvement.
• Safely integrate and operate AI/ML‑enabled solutions and AI-driven workflows within program management practices to improve security posture, risk detection, and operational efficiency, including familiarity with AI-driven systems, tools, or workflows and applying AI/ML concepts to real world products.

Minimum Qualifications:

• Bachelor’s degree in a relevant field (such as Computer Science, Information Systems, Engineering, Cybersecurity, or related discipline) or equivalent practical experience.
• Significant experience leading large-scale, multi-team or multi-domain programs in security, risk management, or compliance within a technology or product-driven organization.
• Demonstrated ownership of complex security and risk program portfolios spanning multiple services or domains, with clear accountability for roadmap execution, risk mitigation, and stakeholder alignment.
• Proven expertise in core program management disciplines, including program planning, dependency and risk management, change management, and executive-level communication in security and risk contexts.

Preferred Qualifications:

• Experience leading global security and risk programs operating at significant scale, including coordinating across multiple regions, business units, and technology platforms.
• Track record of establishing or evolving security and risk program governance models, operating mechanisms, and metrics frameworks that improve operational excellence and overall security posture.
• Demonstrated ability to use data, analytics, and tooling to proactively identify risks, drive prioritized remediation, and measure the effectiveness of security and risk initiatives across services and domains.
• Familiarity with AI-driven systems, tools, or workflows in the security and risk domain, including applying AI/ML concepts to real-world security, fraud, or risk products and safely integrating AI/ML‑enabled solutions that improve detection, prevention, and response.

The total cash range for this position in Seattle is $231,000.00 to $323,500.00. Employees in this role have the potential to increase their pay up to $369,500.00, which is the top of the range, based on ongoing, demonstrated, and sustained performance in the role.

Starting pay for this role will vary based on multiple factors, including location, available budget, and an individual’s knowledge, skills, and experience. Pay ranges may be modified in the future.

Benefits and perks

Expedia Group offers benefits and perks designed to support employees and their families, including medical, dental, and vision coverage, paid time off, an Employee Assistance Program, wellness and travel reimbursement, travel discounts, and International Airlines Travel Agent Network (IATAN) membership. Learn more about life at Expedia Group at https://careers.expediggroup.com/life.

Accommodation requests

Expedia Group is committed to providing an inclusive and accessible recruiting experience. If you need an accommodation or adjustment due to a disability during the application or recruiting process, please submit a request at https://expedia.service-now.com/askeg?id=job_accommodation.

About Expedia Group

Expedia Group includes three flagship consumer brands - Expedia, Hotels.com, and Vrbo - along with a leading B2B travel business and travel advertising offerings. Across our brands and business, we help travelers explore the world with confidence and ease.

Important notice

Employment opportunities and job offers at Expedia Group will always come from Expedia Group's Talent Acquisition and hiring teams. Never share sensitive personal information unless you are confident of the recipient. Expedia Group does not extend job offers via email or messaging tools to individuals with whom we have not made prior contact. Our email domain is @expediagroup.com. The official place to find and apply for roles is https://careers.expediagroup.com/jobs/.

Equal Opportunity

Expedia is committed to creating an inclusive work environment with a diverse workforce. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, veteran status, or any other characteristic protected by law. This employer participates in E-Verify. The employer will provide the Social Security Administration (SSA) and, if necessary, the Department of Homeland Security (DHS) with information from each new employee's I-9 to confirm work authorization.