Program Analyst, Privacy/AI Governance/Cyber Advisory -

Job description

Apply Now Program Analyst, Privacy/AI Governance/Cyber Advisory R5876 Location Mumbai Career Track People & Culture / Legal Program Analyst, Privacy/AI Governance/Cyber Advisory Apply Now This role is eligible for our hybrid work model: Two days in-office. Based in our Mumbai office. Program Analyst, Privacy/AI Governance/Cyber Advisory Our People & Culture and Legal teams make sure we provide a highly ethical working environment where everyone at Priceline can bring their whole selves to work and deliver their very best each day.

We want you to thrive – to feel safe, supported, valued, and growing to your highest potential!

Why is this job a big deal

The position is responsible for coordinating Governance, Risk & Control (“GRC”) processes as part of the Privacy/AI Governance and Cyber Advisory team at Priceline. This role requires an understanding of our existing personal data processing environment and infrastructure, controls and risk profile. It also requires an understanding of the company’s innovative utilization of AI technology to serve our customers and our own productivity in an ethical, responsible and trustworthy manner.

The Analyst will be part of a high-performing and diverse privacy team at Priceline, a US subsidiary of the biggest online travel company of the world. He/she will be part of a dynamic, responsive team that has multiple exciting challenges.

In this role you will get to: Coordinate end-to-end privacy GRC projects and initiatives to improve our compliance & risk posture. Mature and maintain our current NIST-P framework and support our analysis of NIST-AI (or similar framework) for adoption, enhancing the frameworks and controls based on recommendations from maturity and risk assessments. Monitor control performance across the business for timely and effective execution.

Assistance in executing risk assessments and providing support as necessary to our third-party risk assurance process. Adoption, maintenance and enhancement of our GRC tools. Maintain and improve our policy framework, in accordance with our regulatory and compliance requirements. Track progress of issues reported, gaps/risks identified, and support in the creation of dashboards and metrics to oversee mitigation. Collaborate cross-functionally with teams across the Company, such as Security, Technology, Data, Marketing and People & Culture.

Act as a privacy & AI champion. Perform other duties as requested.

Who you are

Bachelor’s degree 3 years of experience working in a privacy or data protection GRC function BIG4 experience is a plus. Experience coordinating an external NIST audit is a plus. One or more industry-standard privacy professional certifications, such as AIGC, CIPP-M, CIPP-E or CIPP-US Knowledge of control and compliance frameworks, e.g. NIST-P, NIST-AI, NIST-CSF Basic understanding of privacy and security by design, responsible AI development and engineering best practices.

Experience driving GRC initiatives in a proactive and independent manner. Experience working with cross-functional teams in fast-paced environments. Solid problem-solving skills and attention to detail. Experience and solid skills in working with AI enterprise platforms and tooling, e.g. ChatGPT, Gemini, Claude. Illustrated history of living the values necessary to priceline.com: Customer, Innovation, Team, Accountability and Trust.

The Right Results, the Right Way is not just a motto at Priceline; it’s a way of life. Unquestionable integrity and ethics are essential. #LI-Hybrid Apply Now