Business Risk & Control Officer - Central Risk

About Us: At Booking.com, data drives our decisions. Technology is at our core. And innovation is everywhere. But our company is more than datasets, lines of code or A/B tests. We're the thrill of the first night in a new place. The excitement of the next morning. The friends you encounter. The journeys you take. The sights you see. And the memories you make. Through our products, partners and people, we make it easier for everyone to experience the world.

Role Description:

As a Business Risk & Control Officer, you will be part of the Central Risk team responsible for overseeing high risk domains and programmes at Booking.com, especially those with cross-functional impact, and providing a horizontal view of risk across the company. In your role, you will serve as a key risk expert, leading and maturing the risk management activities and control environment related to our most critical payment-related processes and initiatives, including Booking Holdings Financial Services (BHFS).

• Provide 2nd Line Oversight:
  
  
  • serve as the primary risk point of contact for large horizontal programs, including BHFS, providing risk oversight and expert advice at a program level;
  • lead cross-functional risk and control related activities, including risk assessments, mitigation, control design and implementation, monitoring and reporting;
  • conduct thematic reviews and risk assessments on end-to-end payment processes and high-risk domains;
  • establish and maintain a horizontal view of risk across the company;
  • serve as a point of escalation for 1st line teams regarding high-impact risks, issues, or events; facilitating the identification, assessment and resolution.
• Drive risk management maturity and enhance risk culture across the organization, including by facilitating formal training sessions, designing and improving risk & control related processes, and acting as a risk ambassador to further enhance risk awareness.
• Support the rollout and adoption of enterprise-wide risk management frameworks, policies, and tooling.
• Partner with IT risk experts to ensure that business and IT process linkages and risks are well understood and effectively managed through controls or other measures.

• 5+ years of previous work experience in risk management, auditing, internal controls or corporate governance;
• Advanced (technical) understanding of and experience in Risk Management, Compliance, Internal Controls, Audit Cycles, regulations (e.g. SOx, financial services regulations);
• Experience performing business process or product risk assessments, and designing internal controls;
• Fundamental understanding of IT risk management and frameworks like ITGC, COSO, NIST.
• Flexibility to adapt to an ever-evolving and dynamic work environment;
• Self-starter with strong sense of responsibility;
• Energetic and very proactive;
• Process, problem solving and action oriented mindset;
• Strong communication, relationship building and influencing skills;
• High level of integrity, confidentiality & professionalism;
• Fluent in English, both written and spoken.

• Experience in highly regulated environments, e.g. financial services or FinTech.
• Risk & control related certifications, e.g. CRISC, CIA, CISA, etc.
• Experience in project/program management and related certifications (e.g. PMP, CAPM, Agile);

• Annual paid time off and generous paid leave scheme including: parent, grandparent, bereavement, and care leave
• Hybrid working including flexible working arrangements, and up to 20 days per year working from abroad (home country)
• Industry leading product discounts - up to 1400 per year - for yourself, including automatic Genius Level 3 status and Booking.com wallet credit

• Let's go places together: How we Hire
• This role does not come with relocation assistance.