Security Operations Analyst II - Security Compliance Center - expedia

At Expedia Group, we help travelers explore the world, one journey at a time. As a global travel company powered by passionate people, trusted partnerships, and leading technology, we connect travelers, partners, and advertisers through our consumer brands, B2B network, and travel advertising business.

Here, you'll do meaningful work that helps millions of people discover, book, and experience travel with more ease, confidence, and joy. Our five Behaviors-Traveler First, Think Big, Operate with Excellence, Ownership Mindset, and Succeed Together-help foster a supportive environment where people can grow their careers and have the flexibility, benefits, and support to do their best work. Join us and build for travelers everywhere.

Security Operations Analyst II – Security Compliance Center

The Expedia Group Security Governance, Risk, Compliance and Privacy (GRCP) organization is building a world‑class Security Compliance Center to support global PCI DSS, SOC 2, NIST, and Privacy compliance operations. We are seeking a highly organized and detail‑oriented Security Compliance Center Analyst to support evidence collection, control testing, documentation, and coordination activities across multiple security and privacy frameworks.

This role is ideal for someone who thrives in a fast‑paced environment, has strong operational discipline, and enjoys working across technical and business teams to help maintain a secure and compliant environment. As part of the India‑based Security Compliance Center, you will play a key role in how we execute day‑to‑day compliance operations and audit readiness tasks.

What you'll do:

· Support operational compliance activities across PCI DSS, SOC 2, NIST CSF, and Privacy frameworks, including gathering evidence and validating control execution.

· Manage and maintain Jira tickets, workflows, and follow‑ups related to compliance tasks, remediation items, and audit requests.

· Collect, review, and document control evidence to ensure accuracy, completeness, and alignment with audit requirements.

· Assist with preparing compliance documentation, including standard operating procedures, control descriptions, and audit artifacts.

· Coordinate with technical teams to obtain required information, clarify requests, and support timely closure of audit‑related actions.

· Participate in internal readiness assessments and support external audits by delivering samples, evidence, and system information.

· Maintain organized repositories of compliance evidence and audit artifacts to support repeatable processes and ongoing compliance.

· Identify gaps and issues in evidence, documentation, or control execution and escalate to the Compliance Center Manager when needed.

· Help track and report status of compliance operational activities, risks, and blockers.