Manager Technical Audit Compliance

Expedia Group brands power global travel for everyone, everywhere. We design cutting-edge tech to make travel smoother and more memorable, and we create groundbreaking solutions for our partners. Our diverse, vibrant, and welcoming community is essential in driving our success.

Why Join Us?

To shape the future of travel, people must come first. Guided by our Values and Leadership Agreements, we foster an open culture where everyone belongs, differences are celebrated and know that when one of us wins, we all win.

We provide a full benefits package, including exciting travel perks, generous time-off, parental leave, a flexible work model (with some pretty cool offices), and career development resources, all to fuel our employees passion for travel and ensure a rewarding career journey. We’re building a more open world. Join us.

Introduction to the team

Expedia Group brands power global travel for everyone, everywhere. We design cutting-edge tech to make travel smoother and more memorable, and we create groundbreaking solutions for our partners. Our diverse, vibrant, and welcoming community is essential in driving our success.

The Technical Audit Manager (Level L) leads and executes complex technical audit and compliance engagements as a senior individual contributor. This role combines advanced technical expertise with hands-on audit delivery and may mentor or guide junior team members. As the team expands, the L level may also lead a pod of auditors. The position assists senior leadership in shaping CAS mission and strategy and drives continuous improvement in risk and compliance practices.

In This Role, You Will

• Lead and execute complex audit projects independently, and with support from J/K level team members as needed.
• Perform advanced risk assessments, control evaluations, and compliance reviews for technical domains.
• Mentor and guide less experienced auditors, fostering a collaborative and high-performance culture.
• Direct people management is not required unless assigned as a pod lead.
• Contribute to CAS strategy, best practices, and continuous improvement initiatives.
• Prepare executive-level reports and communicate findings and recommendations to senior leadership.
• Collaborate with Product, Security, Engineering, and corporate teams to align risk and compliance objectives.
• Advise on SOX and other regulatory audits, including control design and remediation strategies.
• Identify opportunities for control optimization, automation, and process improvements.
• Position to lead a pod of auditors as the team grows and new J/K level hires are made.
• Ensure resource allocation and manage project timelines effectively for assigned audits.
  
  

Experience & Qualifications

• Minimum 6+ years in technical audit, risk assurance, or compliance; direct audit experience required.
• Prior experience with Big 4 or similar consulting firms strongly preferred.
• Proven experience in leading and executing complex audits; people management experience is a plus but not mandatory.
• MBA in IT or Information Security, OR Engineering degree in Computer Science with Information Security electives.
• Advanced knowledge of IT General Controls, cybersecurity, cloud operations, data governance, and privacy compliance.
• Familiarity with SOX, PCI, SOC2, and other regulatory requirements.
• Preferred: CISA or CISSP (or similar), CISM, CRISC. Cloud certifications such as AWS Certified Cloud Practitioner or Azure Fundamentals are strongly desired. AI exposure or certification (e.g., AI risk management, AI governance) is highly preferred.
• Strong analytical and critical thinking skills; ability to navigate ambiguity and drive results.
• Excellent written, oral communication, and stakeholder management skills.
• Strategic Thinking ,technical expertise , stakeholder engagement ,problem solving ,leadership & mentoring and project management.
  
  

Accommodation requests

If you need assistance with any part of the application or recruiting process due to a disability, or other physical or mental health conditions, please reach out to our Recruiting Accommodations Team through the Accommodation Request.

We are proud to be named as a Best Place to Work on Glassdoor in 2024 and be recognized for award-winning culture by organizations like Forbes, TIME, Disability:IN, and others.

Expedia Groups family of brands includes: Brand Expedia®, Hotels.com®, Expedia® Partner Solutions, Vrbo®, trivago®, Orbitz®, Travelocity®, Hotwire®, Wotif®, ebookers®, CheapTickets®, Expedia Group™ Media Solutions, Expedia Local Expert®, CarRentals.com™, and Expedia Cruises™. © 2024 Expedia, Inc. All rights reserved. Trademarks and logos are the property of their respective owners. CST: 2029030-50

Employment opportunities and job offers at Expedia Group will always come from Expedia Group’s Talent Acquisition and hiring teams. Never provide sensitive, personal information to someone unless you’re confident who the recipient is. Expedia Group does not extend job offers via email or any other messaging tools to individuals with whom we have not made prior contact. Our email domain is @expediagroup.com. The official website to find and apply for job openings at Expedia Group is careers.expediagroup.com/jobs.

Expedia is committed to creating an inclusive work environment with a diverse workforce. All qualified applicants will receive consideration for employment without regard to race, religion, gender, sexual orientation, national origin, disability or age.

---