We are looking for an IT Risk and Control Officer to join our Risk & Controls team, which operates as the second line of defense at Booking.com.

We provide a fast-growing working environment, where continuous learning is key for your and Booking.com's development and growth. You will collaborate with other professionals that are experienced in Risk & Controls, IT Security, Internal Audit, software development, product and other fields, who will help you to learn, grow and provide you the opportunities to excel.

A successful risk professional at Booking.com requires a dynamic personality and ability to adapt in a rapidly changing environment. Furthermore, the Officer should be able to collaborate with multiple stakeholders, be able to balance multiple competing priorities, and strive for continuous improvement to drive beneficial business outcomes.

• Serve as a second line of defense point of contact, supporting product, process and control owners throughout the risk management cycle identifying, assessing, managing, monitoring, and reporting risks.
• Lead risk assessment activities for existing and new products, systems and processes, facilitating discussions between the business owners and subject matter experts across Security, Privacy, Legal and other areas.
• Provide guidance and support to the business in designing and implementing appropriate controls to mitigate company risks and support Booking.com to ensure compliance with Booking.com's ITGC framework, SOx, GDPR and other regulatory requirements and control frameworks.
• Collaborate with internal and/or external audit, coordinating and supporting the business in preparing for audits, remediating and mitigating deficiencies.
• Build strong relationships with business leadership, internal audit, external audit, Booking Holdings and external partners, driving successful outcomes in risk management activities and maturing the risk governance across the organization.
• Support ongoing maintenance and continuous improvement of the Booking.com risk management framework, governance, tooling and processes.
• Collaborate & actively participate within the Risk & Controls team to continuously improve the team's processes, capabilities and governance.

• The ideal candidate will have a strong background in IT Risk Management, IT Frameworks, Governance and Controls, combined with an understanding of technology-based product development / DevOps processes
• Must-haves:
• 5+ years of experience gained within risk, internal controls or audit
• Strong experience with designing and/or testing IT General Controls and automated process controls
• Understanding of and experience with risk management relevant fields, including SOx, COSO, NIST
• Strong project management skills
• Strong stakeholder engagement skills (control/process owners, audit)
• Able to make decisions, assess and resolve problems effectively
• Able to work independently & autonomously, while still being a strong team player
• Enthusiastic, self-starting and enjoys change
• Fully comfortable working in English, both written and spoken
• Preferential:
• Experience designing and/or testing controls around in-house built software
• Experience in technology-based product development / DevOps processes\
• Experience in large e-commerce or tech companies