Risk Officer

Slashhash; Amsterdam; On-site; EUR 90,000 - 130,000; Full time

Job summary

Booking.com is seeking a Risk Officer in Amsterdam to join the Marketing, Strategic Partnership Business Unit Risk Partner team. You will help manage business and IT risks, implement a robust Risk Management Process, and strengthen the Internal Control Framework.

The role requires 6+ years of experience in internal controls, audit, risk management, or compliance and involves acting as a SOX design authority and collaborating with the GRC team.

Qualifications

• 6+ years of experience in internal controls, audit, risk management or compliance.
• Knowledge of risk management processes and internal control frameworks.
• Experience supporting SOX design and control testing.

Responsibilities

• Internal Control framework design and implementation.
• Act as SOX design authority.
• Support Audit management and critical audit activities.
• Assist testing of business and IT controls and management certification (SOX 302/404).
• Collaborate with GRC and Risk partners to enhance risk, controls and issue tracking in the GRC platform.
• Promote risk awareness and deliver formal training as needed.

Skills

Stakeholder management

Flexibility

Self-starter

Sense of responsibility

Energetic

Proactive

Problem solving

Action oriented

Communication

Relationship building

Integrity

Confidentiality

Professionalism

Tools

Internal Control Frameworks

COSO

COBIT

NIST

ISO 27001

SOX

GDPR

DMA

DSA

DevOps

Kubernetes

GitLab

Terraform

AWS

GCP

Job description

Booking.com is seeking a Risk Officer to join its Marketing, Strategic Partnership Business Unit Risk Partner team in Amsterdam. The role supports the business in managing business and IT risks, implementing a robust Risk Management Process and Internal Control Framework, and requires 6+ years of experience in internal controls, audit, risk management, or compliance.

Technical (Must-have)

• Internal Control Frameworks
• COSO
• COBIT
• NIST
• ISO 27001
• SOX
• GDPR
• DMA
• DSA
• DevOps
• Kubernetes
• GitLab
• Terraform
• AWS
• GCP

Soft Skills

• Stakeholder management
• Flexibility
• Self-starter
• Sense of responsibility
• Energetic
• Proactive
• Problem solving
• Action oriented
• Communication
• Relationship building
• Integrity
• Confidentiality
• Professionalism

Technical (Nice-to-have)

• Data Governance
• Cloud platforms
• SaaS applications
• Business continuity management
• AI/ML
• RPA
• CISM
• CRISC
• ACCA
• CIA
• CISA
• Project management

Key Responsibilities

• Internal Control framework design and implementation
• Act as SOx design authority
• Support Audit management - act as an SME to support critical audit management activities such as audit planning and issue management
• Support testing of business and IT controls and management certification (SOX Section 302 and 404, other compliance frameworks) by providing guidance to the testing team and reviewing the testing documentation
• Collaborate with GRC team and 1st/2nd line Risk partners to develop solutions and improve how risks, controls and issues are maintained in our GRC platform
• Act as a risk ambassador within Booking.com to further enhance risk awareness and culture, including by facilitating formal training sessions

Internal Control Frameworks, COSO, COBIT, NIST, ISO 27001, SOX, GDPR, DMA, DSA, DevOps, Kubernetes, GitLab, Terraform, AWS, GCP, 6 years of relevant experience