Partner Diligence
ColumnFull Time
Mid-level (3 to 4 years), Senior (5 to 8 years)
Candidates should have 2-5+ years of experience in risk management with a focus on information security. Experience with IT Risk and Security governance frameworks such as ISO 27001, PCI, and HIPAA is required, along with a working knowledge of key operating system, network, application, database, and cloud infrastructure security controls. Certifications such as CISA, CISM, CISSP, PCI QSA, or ISO 27001 Lead Auditor are preferred, and understanding of risks in the banking/financial services sector is an added advantage.
The Third Party Security Assessor will plan and schedule remote security assessments for third party relationships, and communicate Experian's third party risk management requirements to internal and external stakeholders. They will work with internal business partners and third party security subject matter experts to communicate and interpret security requirements, and identify information security deficiencies or risks at third parties. The role involves communicating identified security risks/gaps to stakeholders to obtain action plans, due dates, and documentation for remediation.
Travel booking platform for flights, hotels, rentals
Expedia Group operates in the travel industry, offering a wide range of services for travelers and travel-related businesses. It connects users with options for flights, hotels, car rentals, vacation packages, and activities through its various brands, including Expedia, Hotels.com, and Vrbo. Travelers can easily find and book trips that match their preferences and budgets. The company earns revenue primarily through commissions on bookings and advertising from travel service providers looking to promote their offerings. Additionally, Expedia Group supports its partners by providing access to valuable data and technology, helping them improve their operations and grow their businesses. The goal of Expedia Group is to create a seamless travel experience for users while maximizing the potential of its partners.