Analyst, Operations & Enablement, Privacy/AI Governance

Overview

Analyst, Operations & Enablement role owning the operational backbone of the Privacy/AI Governance and Cyber Advisory team at Priceline, based in the Mumbai office.

What you'll do

• Be the team Administrator for OneTrust (DSAR, PIA/DPIA, cookie compliance modules) and the team liaison with associated platforms (BigID, LogicGate, Panryas, Atlassian platforms, Slack).
• Configure, optimize and continuously improve workflows, automation, reporting and tooling with existing platforms and AI enterprise capabilities, including Claude, ChatGPT and Gemini, to ensure effective and audit-ready documentation and evidence trails.
• Manage workflows including DSARs, RoPA maintenance, PIA/DPIAs and other essential governance processes.
• Monitor and triage platform issues, failures, or workflow breakdowns.
• Liaise with OneTrust and other platform support and internal engineering to resolve technical issues.
• Prepare executive-ready reporting for legal, risk, and leadership.
• Create, improve and maintain Operations documentation and SOPs.
• Maintain close and supportive cross-functional collaboration with Technology, Security, Marketing, People & Culture, Legal Operations, sibling brands and the Booking Holdings Corporate Centre.

Nice to have

• Minimum 3 years of experience in privacy or security operations, data governance, compliance, or GRC programs, preferably within consulting, IT services, or global capability centres (GCCs) supporting privacy, security or compliance programs.
• Solid experience working with AI enterprise platforms and tooling, e.g. ChatGPT, Gemini, Claude.
• Hands-on experience with privacy or AI compliance or GRC platforms (e.g., OneTrust preferred; TrustArc, Security, BigID, ServiceNow, or similar tools) and compliance processes such as DSAR workflows, privacy impact assessments (PIAs/DPIAs), ROPAs and data mapping.
• Understanding of data flows, system integrations, and data lifecycle principles.
• Experience partnering with technical teams (engineering, IT, or security) to troubleshoot issues and implement process or system improvements.
• Familiarity with operationalizing the requirements of global regulations such as GDPR, CCPA/CPRA, and other data protection laws.
• Strong communication skills, with the ability to coordinate cross-functional workstreams across legal, security, product, and business teams.
• Relevant certifications such as CIPM, CIPP/E, CIPP/US, AIGC or ISO/privacy-related certifications.

Details

• Location: Mumbai office.
• Hybrid work model: two days in-office, as determined by you and your manager (ideally Tuesday, Wednesday, or Thursday).