IT Risk & Control Officer

Role Description

About Us: At Booking.com, data drives our decisions. Technology is at our core. And innovation is everywhere. But our company is more than datasets, lines of code or A/B tests. We’re the thrill of the first night in a new place. The excitement of the next morning. The friends you encounter. The journeys you take. The sights you see. And the memories you make. Through our products, partners and people, we make it easier for everyone to experience the world.

Role Description:

We are looking for an IT Risk and Control Officer to join our Risk & Controls team at Booking.com. This team operates as the second line of defense. We provide a fast-growing working environment where continuous learning is key. You will collaborate with experienced professionals in various fields to help you learn and grow. A successful candidate must have a dynamic personality, adaptability, and the ability to balance multiple priorities.

Key Job Responsibilities and Duties:

• Serve as a second line of defense point of contact, supporting product, process and control owners throughout the risk management cycle identifying, assessing, managing, monitoring, and reporting risks.
• Lead risk assessment activities for existing and new products, systems and processes, facilitating discussions between the business owners and subject matter experts across Security, Privacy, Legal and other areas.
• Provide guidance and support to the business in designing and implementing appropriate controls to mitigate company risks and support Booking.com to ensure compliance with Booking.com’s ITGC framework, SOx, GDPR and other regulatory requirements and control frameworks.
• Collaborate with internal and/or external audit, coordinating and supporting the business in preparing for audits, remediating and mitigating deficiencies.
• Build strong relationships with business leadership, internal audit, external audit, Booking Holdings and external partners, driving successful outcomes in risk management activities and maturing the risk governance across the organization.
• Support ongoing maintenance and continuous improvement of the Booking.com risk management framework, governance, tooling and processes.
• Collaborate & actively participate within the Risk & Controls team to continuously improve the team's processes, capabilities and governance.

Qualifications & Skills:

• The ideal candidate will have a strong background in IT Risk Management, IT Frameworks, Governance and Controls, combined with an understanding of technology-based product development / DevOps processes
• 5+ years of experience gained within risk, internal controls or audit
• Strong experience with designing and/or testing IT General Controls and automated process controls
• Understanding of and experience with risk management relevant fields, including SOx, COSO, NIST
• Able to make decisions, assess and resolve problems effectively
• Strong stakeholder engagement skills (control/process owners, audit)
• Able to work independently & autonomously, while still being a strong team player

Benefits & Perks - Global Impact, Personal Relevance:

Booking.com’s Total Rewards Philosophy is not only about compensation but also about benefits. We offer a competitive compensation and benefits package, as well unique-to-Booking.com benefits which include:

• Annual paid time off and generous paid leave scheme including: parent, grandparent, bereavement, and care leave
• Hybrid working including flexible working arrangements, and up to 20 days per year working from abroad (home country)
• Industry leading product discounts - up to 1400 per year - for yourself, including automatic Genius Level 3 status and Booking.com wallet credit

Diversity, Equity and Inclusion (DEI) at Booking.com:

Diversity, Equity & Inclusion have been a core part of our company culture since day one. This ongoing journey starts with our very own employees, who represent over 140 nationalities and a wide range of ethnic and social backgrounds, genders and sexual orientations.

“At Booking.com, the diversity of our people doesn’t just build an outstanding workplace, it also creates a better and more inclusive travel experience for everyone. Inclusion is at the heart of everything we do. It’s a place where you can make your mark and have a real impact in travel and tech.” Paulo Pisano, Chief People Officer

We ensure that colleagues with disabilities are provided the adjustments and tools they need to participate in the job application and interview process, to perform crucial job functions, and to receive other benefits and privileges of employment.

Pre-Employment Screening

If your application is successful, your personal data may be used for a pre-employment screening check by a third party as permitted by applicable law. Depending on the vacancy and applicable law, a pre-employment screening may include employment history, education and other information (such as media information) that may be necessary for determining your qualifications and suitability for the position.