SOX & Risk Controls Officer

Booking.com; Amsterdam; Hybrid; EUR 90,000 - 150,000; Full time

Benefits offered by this job

Annual time off

Hybrid work up to 20 days abroad

Booking.com product discounts

Job summary

Booking.com is seeking a Risk Officer to join the Marketing, Strategic Partnership Risk Partner team. You will lead internal control design, SOX alignment and risk governance across business and IT, partnering with 2nd line risk and operational teams to strengthen controls and reporting.

The role requires 6+ years in controls or risk, strong knowledge of COSO/COBIT/NIST/ISO 27001, and comfort with cloud and DevOps environments. This hybrid role offers global impact and a path to leadership.

Qualifications

• 6+ years of experience in internal controls, audit, risk management or compliance.
• Bachelor's degree or higher (Master’s preferred).
• Strong knowledge of COSO, COBIT, NIST, ISO 27001 and regulatory requirements (SOX, GDPR, DMA, DSA).
• Certifications such as CISM, CRISC, ACCA, CIA, CISA are advantageous.
• Experience with Data Governance, Cloud, SaaS, BCM; AI/ML and RPA are a plus.
• Comfortable with DevOps and cloud environments (Kubernetes, GitLab, Terraform; AWS, GCP).
• Excellent stakeholder management and communication; proactive in dynamic settings.

Responsibilities

• Design, implement and maintain internal control frameworks aligned with regs and standards.
• Collaborate with 2nd line risk partners, process owners, control owners and management.
• Maintain central repository of policies, procedures and control matrices.
• Develop RACI and training materials; enable ongoing control improvements.
• Provide SOx guidance and SME support to stakeholders and remediation efforts.
• Support audit planning, issue management and testing of controls.
• Partner to enhance GRC platform and risk reporting; promote risk culture.

Education

Bachelor's degree

Master's degree preferable

Tools

Kubernetes

GitLab

Terraform

AWS

GCP

Job description

Booking.com is seeking a Risk Officer to join the Marketing, Strategic Partnership Risk Partner team. You will lead internal control design, SOX alignment and risk governance across business and IT, partnering with 2nd line risk and operational teams to strengthen controls and reporting.

The role requires 6+ years in controls or risk, strong knowledge of COSO/COBIT/NIST/ISO 27001, and comfort with cloud and DevOps environments. This hybrid role offers global impact and a path to leadership.