IT Risk & Control Manager - Technology Risk

Job Description

Booking.com BV (the company behind Booking.comTM, the market leading online hotel reservation service in the world), is in search of an IT Risk and Control Manager focused on supporting the Central Technology department who will be part of our growing second line of defence Risk & Controls organization.

We provide a fast-growing working environment, where continuous learning is key for your and Booking.com’s development and growth. You will collaborate with other professionals that are experienced in the fields of Risk & Controls, IT Security and Internal Audit, who will help you to learn, grow and provide you the freedom to experiment. Such is also part of the culture of Booking.com.

B.responsible

• Support process and control owners to understand and identify risks within SOX, PCI or GDPR, Security, business continuity etc. and assist them in determining optimal controls to mitigate risks
• Identify controls based on risks for compliance areas in each of the IT and business processes across various different technologies
• Provide support in the design, implementation and amendment of controls
• Enable continuous improvement of our Booking.com controls framework by providing general and technical guidance on how to maintain and enhance relevant IT controls
• Perform risk assessments for new tech initiatives and projects in the different business units
• Maintain risk register and track risk exposures against risk appetite
• Embed ownership and awareness in 1st line of defense via training and communication to control owners
• Manage and coach small working teams to execute on risk management activities.

B.skilled

• The ideal candidate will have a strong background in IT Controls, Governance and Risk Management.
• 8+ years of experience gained within compliance, internal controls or audit;
• Business or IT degree / certifications (CISSP, CRISC, CISA, or similar)
• Experience working with Risk Management in a DevOps environment.
• Practical Risk Management experience with DevOps or open-source tools like Puppet, Jenkins, Git, Docker, or Kubernetes is a plus
• Audit or operational risk background (client-side experience in addition to consultancy experience is preferred)
• Hands on experience with large e-commerce or tech companies preferable
• Practical IT integrated SOX framework, program experience, maintain risks & controls, familiar with control procedures, automation, monitoring, testing, collecting evidence and remediation activities
• Familiar with ServiceNow, Google Suite, Jira tools (or similar)
• Experience working with frameworks such as COBIT, ISO, NIST is a plus
• Strong program management and stakeholder engagement skills (developers, control/process owners, audit)
• Strong communication skills
• Ability to make decisions, assess and resolve problems effectively
• Experience in managing small teams and comfortable with senior stakeholder engagement
• Enthusiastic, self-starting and thrives in changing, agile environments
• Independent & autonomous, while still a strong team player
• Fully comfortable working in English, both written and spoken

B.Offered

We are a performance-based company that offers career advancement and lucrative compensation, including bonus. We also offer what is called the “Booking Deal” with competitive benefits. This position is open to worldwide candidates and in the case of relocation, we will assist you with a generous relocation package, ensuring a smooth transition to working and living in The Netherlands.