Job Summary

This role is eligible for our hybrid work model: Two days in-office. Based in our Mumbai office.

Program Analyst, Privacy/AI Governance/Cyber Advisory

Our People Culture and Legal teams make sure we provide a highly ethical working environment where everyone at Priceline can bring their whole selves to work and deliver their very best each day. We want you to thrive - to feel safe, supported, valued, and growing to your highest potential!

The position is responsible for coordinating Governance, Risk Control (GRC) processes as part of the Privacy/AI Governance and Cyber Advisory team at Priceline. This role requires an understanding of our existing personal data processing environment and infrastructure, controls and risk profile. It also requires an understanding of the company's creative utilization of AI technology to serve our customers and our own productivity in an ethical, responsible and trustworthy manner.

The Analyst will be part of a high-performing and diverse privacy team at Priceline, a US subsidiary of the biggest online travel company of the world. He/she will be part of a dynamic, responsive team that has multiple exciting challenges.

Responsibilities

- Coordinate end-to-end privacy GRC projects and initiatives to improve our compliance risk posture.
- Mature and maintain our current NIST-P framework and support our analysis of NIST-AI (or similar framework) for adoption, enhancing the frameworks and controls based on recommendations from maturity and risk assessments.
- Monitor control performance across the business for timely and effective execution.




- Assistance in executing risk assessments and providing support as necessary to our third-party risk assurance process.
- Adoption, maintenance and enhancement of our GRC tools.
- Maintain and improve our policy framework, in accordance with our regulatory and compliance requirements.
- Track progress of issues reported, gaps/risks identified, and support in the creation of dashboards and metrics to oversee mitigation.
- Collaborate cross-functionally with teams across the Company, such as Security, Technology, Data, Marketing and People Culture.
- Act as a privacy AI champion.
- Perform other duties as requested.

Qualifications

- Bachelor's degree
- 3 years of experience working in a privacy or data protection GRC function
- Big4 experience is a plus.
- Experience coordinating an external NIST audit is a plus.
- One or more industry-standard privacy professional certifications, such as AIGC, CIPP-M, CIPP-E or CIPP-US
- Knowledge of control and compliance frameworks, e.g. NIST-P, NIST-AI, NIST-CSF
- Basic understanding of privacy and security by design, responsible AI development and engineering best practices.
- Experience driving GRC initiatives in a proactive and independent manner.
- Experience working with cross-functional teams in fast-paced environments.
- Solid problem-solving skills and attention to detail.
- Experience and solid skills in working with AI enterprise platforms and tooling, e.g. ChatGPT, Gemini, Claude.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.

📌 Program Analyst, Privacy/AI Governance/Cyber Advisory (Mumbai)
🏢 Priceline
📍 Mumbai