Join our companies in their quest to drive powerful, positive, change that endures.

Senior Legal Program Manager - Privacy, Cybersecurity and AI



Software Engineering, Legal, Operations, Data Science
United States · Remote
Posted on Friday, June 7, 2024

KAYAK, part of Booking Holdings (NASDAQ: BKNG), is the world’s leading travel search engine. With billions of queries across our platforms, we help people find their perfect flight, stay, rental car, cruise, or vacation package. We’re also transforming the in-travel experience with our app and new accommodation software. For more information, visit

As an employee of KAYAK, you will be part of a global network that includes OpenTable and KAYAK's portfolio of metasearch brands including Swoodoo, checkfelix, momondo, Cheapflights, Mundi and HotelsCombined. Many employees are dedicated to one brand, but we all have the benefit of using each others strengths and insights. Together, we're able to help people experience the world through dining and travel.

As a Sr. Legal Program Manager, you will play a crucial role in overseeing and managing legal programs related to data privacy, cybersecurity and artificial intelligence (AI) within KAYAK and OpenTable. Your primary focus will be developing and implementing initiatives and programs to ensure compliance with global privacy regulations, cybersecurity requirements and addressing legal considerations in AI technologies. You will collaborate with cross-functional teams to successfully operationalize these initiatives that protect personal data, mitigate cyber risks, and promote responsible AI use in a fast-paced and dynamic global environment.

This role will report to our Director, Legal and may be located remotely.

In this role, you will:

  • Develop and implement legal programs focusing on privacy, cybersecurity, and AI in alignment with organization objectives

  • Monitor and ensure compliance with data privacy regulations such as GDPR, CCPA and other global data privacy regulations.

  • Oversee legal cybersecurity initiatives and collaborate with cross-functional security teams to operationalize these initiatives

  • Identify and mitigate privacy and cybersecurity risks associated with AI and recommend legal strategies to address them

  • Stay informed about emerging global regulations, including technology regulations impacting the travel and dining industries globally

  • Day-to-day management of our global privacy program, including meeting key quarterly and annual milestones and communicating with senior management on program progress

  • Collaborating on privacy audits and remediation, regulatory tracking and reporting compliance with our internal privacy control framework and other privacy metrics

  • Tracking privacy regulatory change management and interpreting relevant privacy

  • Drafting and reviewing privacy and data protection terms including data protection agreements

  • Advancing privacy by design efforts such as creating privacy impact assessments and advising the KAYAK and OpenTable technology teams throughout the technology life cycle

  • Oversee DSR escalation requests, responses, and processes

  • Creating and administering policies and procedures to strengthen our data governance practices

  • Coordinating with other legal professionals across the Booking Holdings group of companies on practices that have a global and group-wide impact on privacy

Please apply if:

  • At least 5-8 years of experience in-house focusing on privacy and data protection and cybersecurity regulations with strong project management and organizational skills and a passion for artificial intelligence

  • CIPP/US, CIPP/EU, CIPM or equivalent professional certification strongly preferred

  • Thorough knowledge and understanding of laws, regulations and trends affecting global privacy and data practices, including the GDPR and the CCPA

  • Ability to articulate the importance of legal initiatives to technical and on-technical partners

  • Fluency in performing risk assessments and compliance gap assessments against relevant regulatory requirements and driving issues to remediation

  • Positive energy and an independent and proactive attitude

  • Exceptional collaboration, partnership and influencing skills with the ability to work in a global environment across multiple locations and time zones


  • Generous paid vacation

  • Day off on your birthday

  • Company matched retirement plans

  • Health, dental and vision insurance plans

  • Flexible Spending Accounts

  • Headspace Subscription

  • Drinks, coffee, snacks, games etc.

  • Weekly Catered Lunches

  • Free massages from professional massage therapists

  • Universal Paid Parental Leave

There are a variety of factors that go into determining a salary range, including but not limited to external market benchmark data, geographic location, and years of experience sought/required. The range for this United States located role is $130,000-$160,000.

In addition to a competitive base salary, roles are eligible for additional compensation and benefits including: annual cash bonus; health benefits; flexible spending account; retirement benefits; life insurance; paid time off (including PTO, paid sick leave, medical leave, bereavement leave, floating holidays and paid holidays); and parental leave and benefits.

Diversity and Inclusion

We aspire to have a workplace that reflects all of the diverse communities we serve. We know that when we have diverse teams we produce more creative ideas, products, and better outcomes for our team members. OpenTable/KAYAK is proud to be an Equal Opportunity Employer, and we welcome and encourage candidates from all backgrounds and experiences to apply for roles on our team. Whoever you are, just be you.

We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform job responsibilities, and to receive other benefits and privileges of employment. Please contact us to request accommodation.