Manager, IT Controls Assurance (COE India)

Booking Holdings Inc.; Bengaluru; On-site; INR 4,000,000 - 6,000,000; Full time

Job summary

Booking Holdings Inc. in India invites an experienced Manager, IT Controls Assurance (COE India) to lead IT SOX, ITGC and technology controls within our Global Capability Centre environment.

The role requires blending technical expertise with risk & controls knowledge, audit experience and people leadership to drive a high-performing controls team and partner with Internal/External Audit, Finance and senior technology leaders.

Qualifications

• 12+ years in IT SOX/ITGC, technology risk, IT audit or related areas
• Minimum 3 years of people management experience
• Strong understanding of ERP environments, preferably SAP
• Experience with Internal/External Audit collaboration and senior stakeholders

Responsibilities

• Lead IT assurance program delivery across ITGC, SAP controls and risk & compliance.
• Oversee IT General Controls, application controls and technology risk management.
• Review testing documentation and drive automation and efficiency of SOX testing.
• Partner with Internal/External Audit, Finance and Technology leadership to maintain control health.
• Identify control gaps, drive remediation and ensure timely closure of findings.
• Provide technical guidance on ERP environments and large-scale applications.
• Lead a team of controls professionals including coaching and succession planning.
• Build relationships with senior stakeholders to embed controls in day-to-day operations.

Skills

ITGC & SOX

Technology risk & controls

ERP environments

SAP

Audit collaboration

Leadership & coaching

Education

Bachelor’s degree in Engineering/IT/CS/Finance

CA/CPA/CISA/CRISC

Tools

SAP

Job description

Role Overview

We are looking for an experienced Manager, IT Controls Assurance (COE India) to lead our IT SOX, ITGC and technology controls agenda within a Global Capability Centre (GCC) environment. The role requires a strong blend of technical expertise, risk and controls knowledge, audit experience and people leadership.

The ideal candidate will be someone who can operate comfortably between technology teams, internal/external audit, Finance, Risk & Controls and senior leadership, while building and leading a high-performing controls team.

What You’ll Do

• The role leads IT assurance program delivery and review including risk assessment

• Provide leadership and oversight across IT General Controls, application controls and technology risk & compliance.

• Review of testing documentation, assurance scope beyond SOx, Testing automation and efficiency, and annual capacity estimation.

• Partner closely with Internal Audit, External Audit, Finance, Risk & Controls and Technology leadership to ensure effective control environments.

• Identify control gaps, drive remediation and ensure timely closure of audit findings.

• Provide technical guidance on ERP and enterprise technology environments, with strong understanding of platforms such as SAP and other large-scale business applications.

• Assess risks across areas such as access management, change management, IT operations, segregation of duties, system implementations and application controls.

• Lead and manage a team of controls/audit professionals, including coaching, capability building, performance management and succession planning.

• Build strong relationships with senior stakeholders and influence technology teams to embed controls into their day-to-day operations.

• Drive continuous improvement and automation of the SOX/control testing process.

• Support transformation initiatives, system implementations and changes in the technology landscape from a controls and compliance perspective.

• Provide clear, executive-level reporting on control health, key risks, audit observations and remediation progress.

What We’re Looking For

• 12+ years of overall experience in IT SOX, ITGC, Technology Risk, IT Audit, Controls or related areas with minimum 3 years of experience in people managment

• Strong hands-on expertise in ITGC, SOX compliance, IT audit and risk & controls.

• Experience managing SOX programs in a complex, global organization or GCC environment.

• Strong understanding of ERP environments, preferably SAP, and their associated IT/application controls.

• Experience with Cloud platforms, SaaS applications, and emerging technologies (AI/ML, RPA) is a plus
• Experience with in-house built software is a plus

• Experience working with Internal Audit, External Audit and senior business/technology stakeholders.

• Proven people management experience, with the ability to lead, develop and motivate a team.

• Strong understanding of IT processes including access controls, change management, IT operations, SDLC, cybersecurity controls and segregation of duties.

• Experience managing remediation of control deficiencies and audit findings.

• Strong analytical, problem-solving and stakeholder management skills.

• Ability to translate complex technology/control risks into clear business implications for senior leadership.

Education & Preferred Background

• Bachelor’s degree in Engineering, Information Technology, Computer Science, Finance, Accounting or related discipline.

• CA / CPA / CISA / CRISC or other relevant professional qualification would be an advantage.

• Candidates with an Engineering or CA background would be preferred, particularly where combined with strong technology controls experience.

• Prior experience in a GCC / Global Shared Services / multinational environment is strongly preferred.

The Ideal Candidate

We’re looking for a leader who is technically strong enough to challenge and guide Technology teams, controls-focused enough to stand up to Audit, and people-oriented enough to build and lead a strong team.

Someone who can move beyond “testing controls” to actually influencing how technology risk and controls are managed across the organization.

Pre-Employment Screening

If your application is successful, your personal data may be used for a pre-employment screening check by a third party as permitted by applicable law. Depending on the vacancy and applicable law, a pre-employment screening may include employment history, education and other information (such as media information) that may be necessary for determining your qualifications and suitability for the position.