IC&A Team Lead, IT Control Testing

Booking Holdings (NASDAQ: BKNG); Bengaluru; On-site; INR 1,500,000 - 2,100,000; Full time

Job summary

Booking Holdings India, based in Bangalore, seeks a Team Lead, Risk & Control to lead R&C with SOX testing of IT Application controls and IT Dependent Manual Controls. You will manage a team and advise on controls design and improvements across multiple processes.

The role requires strong IT risk management, SOX/COSO/COBIT knowledge, and robust stakeholder management in a global environment.

Qualifications

• 7+ years of experience in IT compliance, internal controls, internal/external audit, incl. international teams.
• Strong understanding of design assessment and operating effectiveness of IT automated and manual controls.
• Knowledge of SOX, COSO, COBIT frameworks.
• Strong stakeholder management skills.

Responsibilities

• Manage and guide a small team of testers and contribute to their development.
• Provide daily leadership to achieve targets and deadlines.
• Design and execute day-to-day testing of IT Application controls and IT Dependent Manual Controls (SOX).
• Collect, analyze, and document information to assess testing areas.
• Identify gaps in design and execution and communicate issues and recommendations.
• Collaborate with R&C to ensure critical SOX controls are well designed and documented.
• Build partnerships across departments and continuously improve processes and governance.
• Assist recruitment in onboarding new team members.

Skills

IT risk management

SOX testing

Stakeholder management

Team leadership

English proficiency

Education

Bachelor’s degree

Professional certification (CISA/CRISC/CIA)

Job description

About Us

Booking Holdings India is a Center of Excellence based in Bangalore, India and was created to support the increasing business demands of the Booking Holdings Brands. The Center of Excellence provides access to specialized and highly skilled talent, leading industry best practices, and collaboration opportunities across all of our Brands.

About Us

Booking Holdings India is a Center of Excellence based in Bangalore, India and was created to support the increasing business demands of the Booking Holdings Brands. The Center of Excellence provides access to specialized and highly skilled talent, leading industry best practices, and collaboration opportunities across all of our Brands.

As part of our Booking Holdings India team, you will have the opportunity to be a part of the world’s leading provider of online travel, with a mission of making it easier for everyone to experience the world through six-primary consumer facing brands: Booking.com, Priceline, Agoda, KAYAK, OpenTable and Rentalcars.com.

About The Role

We are now looking for a Team Lead, Risk & Control to help build and lead R&C with SOx testing of IT Application controls and IT Dependent Manual Controls. You will be responsible for managing a team directly working on testing internal controls to support SOX302 attestation.

The R&C ITAC SOx Team Lead is also a subject matter expert, responsible for advising the Risk team on controls design, deficiencies evaluation and improvements across multiple processes from SOx testing standpoint.

A successful risk professional requires a dynamic personality and ability to adapt in a rapidly changing environment. Furthermore, Team Lead should be able to collaborate with multiple stakeholders, be able to balance multiple competing priorities, and strive for continuous improvement to drive beneficial business outcomes.

B. responsible: key areas of responsibility will include, but are not limited to

• Manage and provide guidance to a small team of testers and thus contribute to their development as a professional


• Take ownership for team results and provide daily leadership to a team to achieve the targets and deadlines )


• Design and execute the day-to-day testing activities of IT Application controls and IT Dependent Manual Controls, with a focus on regulatory/compliance (SOX) related risks




• Collect, analyze, and interpret information to assess and conclude on each assigned testing area with clear concise documentation


• Identify gaps in design and execution, and communicate issues and recommendations to R&C team and control owners


• Develop and maintain comprehensive documentation including process walkthrough documentation, control testing documentation and any others required




• Collaborate and partner with R&C by providing guidance and ensuring that critical SOx controls are adequately designed and documented, in order to strengthen the control environment, mitigate the company risks and support the business in achieving objectives


• Continually build partnerships with the various departments throughout the Company


• Constantly think of improvements to the existing processes and controls


• Collaborate & participate within R&C to continuously improve the R&C’s capabilities and governance from SOX testing standpoint


• Collaborate with the recruitment team in the recruitment process and onboarding of new team members

B.skilled:

• The ideal candidate should have a strong background in IT risk management, and perform ERP audits with a good understanding of IT application controls and IT dependent manual controls / business process controls.


• 7+ years of experience gained within IT compliance, internal controls, internal/external audit, including experience working with teams in an international environment




• Strong understanding of design assessment and operating effectiveness assessment of IT automated process controls, IT dependent manual controls, and interface controls.


• Experience in technology-based product development / DevOps processes, cloud security and other modern day technologies


• Understanding of different architecture (SOA and microservices), and ability to review source codes is an added advantage.




• Understanding of and experience with risk management relevant fields and frameworks, including SOx, COSO, and COBIT


• Strong working knowledge of SOX


• Strong stakeholder management skills (risk/function owners, auditors)


• Strong project management skills; ability to multitask and successfully manage multiple priorities and projects


• Strong work ethic, enthusiastic, self-starting, adaptable and enjoys change in a super engaged team


• Able to make decisions, assess and resolve problems effectively


• Able to work independently & autonomously, while still being a strong team player


• Fully comfortable working in English, both written and spoken


• Professional certification, such as CISA/CRISC/CIA (or similar), would be an advantage


• Relevant Bachelor’s degree required

Pre-Employment Screening

If your application is successful, your personal data may be used for a pre-employment screening check by a third party as permitted by applicable law. Depending on the vacancy and applicable law, a pre-employment screening may include employment history, education and other information (such as media information) that may be necessary for determining your qualifications and suitability for the position.