IT Risk and Compliance Analyst, Booking.com
Central Tech
More information about location
Leading travel accommodation and experiences marketplace
Be an early applicant
Leading travel accommodation and experiences marketplace
1001+ employees
Be an early applicant
More information about location
1001+ employees
Company mission
To shape the future of travel through cutting edge technology, to make it easier for everyone to enjoy amazing experiences wherever they go.
Role
Who you are
- Experience in Cloud Security and Compliance (AWS, GCP, Azure, etc) and DevOps domain is a MUST
- Familiarity/experience working with a wide range of technologies (internally developed applications, Windows, Linux, Databases, Gitlab, etc) from a risk and security perspective
- Hands-on experience in business analysis, auditing, IT governance, risk management or internal controls
- Ability to develop solid relationships with engineering teams in order to drive the adoption of the risk management culture
- Technical understanding of internal control requirements and design and experience in applying them in various businesses
- Stay flexible to meet the dynamic business needs, while maintaining robust solutions that strengthen the IT control environment
- Able to split large tasks into logical, manageable and decoupled actions which are managed effectively and delivered on time
- Be flexible and agile in response to the change in business, change in stakeholder expectations and/or change in regulatory/operating environment of B.com
- Strong independent contributor, while still a strong team player
- Previous experience in software development, software engineering is a plus
- Strong communication skills; fully comfortable working in English, both written and spoken
What the job involves
- As part of this strategy, Booking has 3 departments focusing on each line of defense
- Global Internal Audit (GIA) is responsible for the 3rd line of defense, Risk and Controls (R&C) is responsible for the 2nd line of defense, while the responsibility of 1st line has been distributed between process/control owners and the Trust, Risk, Assurance and Compliance (TRAC) team
- TRAC is the first-line risk team responsible for Central Tech business unit risks and Security, Safety & Fraud (SS&F) risks across the company
- The IT Risk & Compliance Analyst for Central Tech is responsible for partnering with the platform and capability owners throughout the Central Tech business function to design and maintain IT security and compliance controls in line with our risk appetite and regulatory requirements and to maintain the quality of our processes
- The role requires to work closely with platform owners and development teams to have a solid high level understanding of risks, but be able to zoom in and out of the details to ensure understanding of the solution design for designing effective controls
- Act as a Risk Partner to platform owners and development teams, providing expertise in NIST, SOX, PCI-DSS, NIS2 and security best practices and tailoring compliance requirements to cloud and devops environments
- You'll architect "Guardrails" for secure and compliant onboarding to cloud environments, ensuring that security is "baked in" rather than "bolted on."
- Provide Right-Sized Advisory on control design. You will champion agile and scalable solutions that solve problems without overengineering, ensuring controls are effective but not obstructive
- Bridge the Gap between technical teams and audit functions, translating complex tech stacks into risk-based language for Internal/External Audit
- Execute Technical Risk Assessments for new platforms and major architectural changes. You will identify risks in modern tech stacks and support teams in implementing appropriate safeguards
- Maintain the Risk Inventory. Systematically track and monitor identified issues originating from audits, penetration tests, and risk assessments to ensure Booking.com maintains a robust and resilient risk posture against current and emerging attack vectors
- Perform Root Cause Analysis on issues to identify systemic risks and propose structural improvements to the control framework
- Drive Automation Initiatives by identifying manual compliance bottlenecks and designing efficient workflows leveraging automation and AI
- Unify Control Frameworks across various platforms to simplify compliance and reduce "compliance fatigue" for engineering teams
- Enhance Methodology: Contribute to refinement of risk assessment procedures to keep pace with the dynamic nature of a high-growth tech environment
- Deliver Data-Driven Risk Insights by reporting on risk coverage and issues using tools like Jira and ServiceNow
- Support Audit Readiness by ensuring that platform owners are prepared for regulatory cycles, walkthrough preparation and facilitation, coordinating evidence requests and drafting remediation & mitigation memos as needed and aligning with engineering teams
Our take
Booking.com has established itself as a leading digital travel company. The company reaps the benefits of its status in the market and is currently in a stronger position than its up-and-coming competitors such as Expedia, Trivago and Trip.com. Airbnb represents the sharing economy and acts as a disruptive force in this market but still has ways to go to compete with Booking.com.
In recent years, there has been considerable growth in the number of travellers wishing to travel more sustainably. And Booking.com is well positioned to attract these consumers, having introduced a Travel Sustainable badge on their platform which over 100,000 properties have achieved for their sustainability efforts.
The company was originally founded with a core focus on hotels, and the platform now offers more than 31M accommodation listings. It has also expanded into different services, including flights, car rentals, and attractions.
Freddie
Company Specialist at Welcome to the Jungle
Insights
Company
Company benefits
- Health insurance
- Free access to Headspace for you and your loved ones
- Global Employee Assistance Program
- Meditation and Breastfeeding rooms at the office
- Booking Cares - 2 days per year to volunteer and learn
- Life insurance
- Disability insurance
- Pension plan
- Annual paid time off
- Parental leave - 22 weeks
- Grandparent leave - 10 days
- Care leave - 10 days
- Bereavement leave - up to 4 weeks
- Anniversary leave
- Working from Home Furniture and Ergonomic Support
- Working from Abroad - up to 20 days per year
- Discounts & Wallet credits to spend on our products
- Upgrade to Booking.com Genius Level 3
- Friends & Family Booking.com discount vouchers
- Free access to online learning platforms
- Development and mentorship programs to support career growth
- Access to trainings and workshops
- Team development opportunities
- Local discount programs
- Game rooms in offices
- On-site meals, coffee and snacks including vegan options
Company HQ
Nieuwmarkt en Lastage, Amsterdam, Netherlands
Leadership
Glenn Fogel
(CEO)Previously Vice President at Morgan Stanley. They joined Booking Holdings in 2000 and have held several high profile and executive positions since. They are currently the President and CEO
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 50 more jobs at Booking.com