Strategic Risk Officer: SOX & Internal Controls Lead

Booking Holdings, Inc.; Amsterdam; On-site; EUR 90,000 - 140,000; Full time

Benefits offered by this job

Hybrid working

Work from abroad option

Product discounts

Job summary

Booking.com seeks a Risk Officer to join the SP Risk Partner team, acting as the first line of defense. You will design, implement and maintain internal control frameworks aligned with SOX, COSO, COBIT, NIST, ISO 27001 and related regulations, partnering with 2nd line risk and IT stakeholders to ensure strong controls across the business.

You will monitor IT and business processes, identify and mitigate risks, and support risk reporting and assurance across the unit.

Qualifications

• Knowledge of internal control frameworks (COSO, COBIT, NIST, ISO 27001) and regulatory requirements (SOX, GDPR).
• Experience with data governance, cloud platforms and SaaS applications.
• Familiar with DevOps practices and modern tech environments.

Responsibilities

• Design, implement and maintain internal control frameworks aligned with regulatory requirements.
• Act as SOX design authority and coordinate with risk, control and IT stakeholders.
• Support audit management and testing of controls; contribute to risk reporting.
• Collaborate with GRC and risk partners to improve risk and control maintenance.

Skills

Internal controls

Audit

Risk management

Compliance

SOX

COSO

COBIT

NIST

ISO 27001

Data Governance

Cloud platforms

SaaS

DevOps

Kubernetes

Gitlab

Terraform

AWS

GCP

Stakeholder management

Project management

English communication

Education

Bachelor's degree or higher

Master’s Degree preferable

Tools

Kubernetes

Gitlab

Terraform

AWS

GCP

Job description

Booking.com seeks a Risk Officer to join the SP Risk Partner team, acting as the first line of defense. You will design, implement and maintain internal control frameworks aligned with SOX, COSO, COBIT, NIST, ISO 27001 and related regulations, partnering with 2nd line risk and IT stakeholders to ensure strong controls across the business.

You will monitor IT and business processes, identify and mitigate risks, and support risk reporting and assurance across the unit.