Manager, IT Controls Assurance (COE India)

Booking Holdings (NASDAQ: BKNG); Bengaluru; On-site; INR 3,500,000 - 7,000,000; Full time

Job summary

Booking Holdings in Bengaluru, Karnataka seeks an experienced Manager, IT Controls Assurance (COE India) to lead IT SOX, ITGC and technology controls within a Global Capability Centre environment.

The role blends technical expertise with risk and controls knowledge, audit experience and people leadership, working with technology teams, Internal/External Audit, Finance, Risk & Controls and senior leadership to build a high-performing controls organization.

Qualifications

• Minimum 12+ years in IT SOX/ITGC, tech risk, IT audit or related areas.
• At least 3 years of people management experience.
• Strong hands-on expertise in ITGC, SOX, IT audit and risk & controls.
• Experience with ERP environments, preferably SAP.
• Experience with internal and external audits and senior stakeholders.

Responsibilities

• Lead IT assurance program delivery and risk assessment.
• Oversee IT general controls, application controls, and technology risk & compliance.
• Review testing documentation and expand assurance scope beyond SOX.
• Collaborate with Internal Audit, External Audit, Finance, Risk & Controls and Technology leadership.
• Identify control gaps and drive remediation with timely closure of findings.
• Provide guidance on ERP environments and large-scale business applications.
• Lead and develop a team of controls/audit professionals.
• Deliver executive-level reports on control health and remediation progress.

Skills

IT Controls

IT SOX

ITGC

Risk & Controls

People management

Stakeholder management

Education

Bachelor's degree in Engineering/IT/CS/Finance/Accounting

CA / CPA / CISA / CRISC or equivalent

Tools

SAP

Cloud platforms

SaaS applications

Job description

Role Overview

We are looking for an experienced Manager, IT Controls Assurance (COE India) to lead our IT SOX, ITGC and technology controls agenda within a Global Capability Centre (GCC) environment. The role requires a strong blend of technical expertise, risk and controls knowledge, audit experience and people leadership. The ideal candidate will be someone who can operate comfortably between technology teams, internal/external audit, Finance, Risk & Controls and senior leadership, while building and leading a high-performing controls team.

What You’ll Do

• The role leads IT assurance program delivery and review including risk assessment
• Provide leadership and oversight across IT General Controls, application controls and technology risk & compliance.
• Review of testing documentation, assurance scope beyond SOx, Testing automation and efficiency, and annual capacity estimation.
• Partner closely with Internal Audit, External Audit, Finance, Risk & Controls and Technology leadership to ensure effective control environments.
• Identify control gaps, drive remediation and ensure timely closure of audit findings.
• Provide technical guidance on ERP and enterprise technology environments, with strong understanding of platforms such as SAP and other large-scale business applications.
• Assess risks across areas such as access management, change management, IT operations, segregation of duties, system implementations and application controls.
• Lead and manage a team of controls/audit professionals, including coaching, capability building, performance management and succession planning.
• Build strong relationships with senior stakeholders and influence technology teams to embed controls into their day-to-day operations.
• Drive continuous improvement and automation of the SOX/control testing process.
• Support transformation initiatives, system implementations and changes in the technology landscape from a controls and compliance perspective.
• Provide clear, executive-level reporting on control health, key risks, audit observations and remediation progress.

What We’re Looking For

• 12+ years of overall experience in IT SOX, ITGC, Technology Risk, IT Audit, Controls or related areas with minimum 3 years of experience in people managment
• Strong hands-on expertise in ITGC, SOX compliance, IT audit and risk & controls.
• Experience managing SOX programs in a complex, global organization or GCC environment.
• Strong understanding of ERP environments, preferably SAP, and their associated IT/application controls.
• Experience with Cloud platforms, SaaS applications, and emerging technologies (AI/ML, RPA) is a plus
• Experience with in-house built software is a plus
• Experience working with Internal Audit, External Audit and senior business/technology stakeholders.
• Proven people management experience, with the ability to lead, develop and motivate a team.
• Strong understanding of IT processes including access controls, change management, IT operations, SDLC, cybersecurity controls and segregation of duties.
• Experience managing remediation of control deficiencies and audit findings.
• Strong analytical, problem-solving and stakeholder management skills.
• Ability to translate complex technology/control risks into clear business implications for senior leadership.

Education & Preferred Background

• Bachelor's degree in Engineering, Information Technology, Computer Science, Finance, Accounting or related discipline.
• CA / CPA / CISA / CRISC or other relevant professional qualification would be an advantage.
• Candidates with an Engineering or CA background would be preferred, particularly where combined with strong technology controls experience.
• Prior experience in a GCC / Global Shared Services / multinational environment is strongly preferred.

The Ideal Candidate

We're looking for a leader who is technically strong enough to challenge and guide Technology teams, controls-focused enough to stand up to Audit, and people-oriented enough to build and lead a strong team. Someone who can move beyond “testing controls” to actually influencing how technology risk and controls are managed across the organization.

Pre-Employment Screening

If your application is successful, your personal data may be used for a pre-employment screening check by a third party as permitted by applicable law. Depending on the vacancy and applicable law, a pre-employment screening may include employment history, education and other information (such as media information) that may be necessary for determining your qualifications and suitability for the position.