Information Technology Compliance Program Manager

Join the Xanterra Travel Collection team:

Xanterra Travel Collection is a premier group of travel and leisure businesses with a focus on sustainability and exceptional service.

Headquartered in Greenwood Village, Colorado, we operate iconic properties and services in stunning locations worldwide, including lodging, food and beverage, Windstar Cruises, short-line railroads, and adventure travel.

We are dedicated to creating unforgettable experiences for our guests and providing transformative career opportunities for our team members.

We are currently seeking an IT Compliance Program Manager to be responsible for establishing and leading a comprehensive governance program across the organization’s technology ecosystem—including PCI DSS, our Enterprise Security Standards, and our Enterprise Privacy Standards programs.

This leader ensures technology operations remain compliant and aligned with security standards and regulatory requirements.

The position is responsible for planning and delivering compliance-focused initiatives that strengthen the organization’s security posture, reduce risk, and support adherence to regulatory and audit requirements.

This role partners closely with compliance, internal audit, IT, infrastructure, and business teams to coordinate project activities, manage schedules and risks, develop processes, create metrics, and communicate progress to stakeholders.

This is a hands-on delivery role suited for a program manager with solid IT experience and a growing exposure to compliance programs, audits, and control remediation initiatives.

• Manage compliance projects or defined workstreams within larger compliance initiatives.
• Own and manage PCI DSS, Enterprise Security Standards, Enterprise Privacy Standards programs, and the internal controls, audit remediation, and policy or evidence management activities for these programs.
• Develop and maintain project plans, schedules, task tracking, and status reporting for compliance initiatives and remediation efforts.
• Work with the business to establish policies, standards, and procedures that maintain our compliance.
• Oversee the IT controls framework and serve as primary contact for auditors.
• Track milestones, dependencies, and deliverables to support formal compliance program requirements and audit timelines.
• Work closely with IT teams, business stakeholders, and external assessors to coordinate project tasks and deliverables.
• Assist in gathering requirements, documenting scope, and validating deliverables related to controls, evidence collection, and remediation plans.