Risk Officer - IT
Risk Officer - IT
Original Advert
At Booking.com, data drives our decisions. Technology is at our core. And innovation is everywhere. But our company is more than datasets, lines of code or A/B tests. We're the thrill of the first night in a new place. The excitement of the next morning. The friends you make. The journeys you take. The sights you see. And the food you sample. Through our products, partners and people, we can empower everyone to experience the world.
Our FinTech business unit - with teams in Amsterdam, Bangalore, London and Shanghai - develops new products and drives innovation to help us continue removing financial friction from the travel process. That makes buying and selling travel-related products and services simpler for both travelers and partners.
The Financial Systems team provides technology expertise to the Finance department, and is a key IT service provider across multiple Booking.com brands including Booking Holdings Financial Services (BHFS), managing core systems such as SAP ERP, SAP HANA and connected enterprise applications.
Role Description
As a Financial Systems Risk Officer, you safeguard the quality of our IT processes and controls, aligned with our risk appetite. You partner with cross‑brand stakeholders across functions, balancing a helicopter view with hands‑on detail to understand processes and provide precise guidance.
Key Job Responsibilities and Duties
Partner with Financial Systems and the wider business to design and implement IT controls that strengthen the control environment, mitigate risks, and enable business objectives; embed Risk & Control in projects/initiatives; and monitor control performance for timely, effective execution.
Lead scheduled and ad‑hoc risk assessments to identify risks and control gaps; recommend improvements; design and implement controls.
Drive timely remediation and mitigation of deficiencies.
Standardize and maintain risk management processes and control documentation (flowcharts, process narratives, RCMs, SoD matrices), and deliver targeted training on internal controls and compliance.
Support ongoing regulatory compliance (SOx, EBA, GDPR, NIS2, etc.); coordinate annual (SOx) audits to closure and manage stakeholders (Internal/External Audit and SOx team).
Qualifications & Skills
5-10 years of previous work experience in business analysis, IT auditing, corporate governance, risk management or internal controls as the first line of defense
Experience in IT auditing and / or risk management, corporate governance, internal controls (primarily with SAP environments such as S/4HANA, ECC, GRC, BTP, PCE)
Experience in GRC tooling and governance regarding User Access Management, SoD monitoring and Emergency Access Management
Thorough understanding of internal controls (e.g. SOX-audits, highly regulated financial environments) and experience in applying them in various business areas/functions
Experience in AI and Process Automation, finance processes and controls, payments & e-money regulations is a plus
Strong communication, relationship building skills, problem solving and action oriented mindset
Pre-Employment Screening
If your application is successful, your personal data may be used for a pre-employment screening check by a third party as permitted by applicable law. Depending on the vacancy and applicable law, a pre-employment screening may include employment history, education and other information (such as media information) that may be necessary for determining your qualifications and suitability for the position.
Application managed by Booking.com