Risk Manager (Risk Partner)

• The role of the Risk & Control function within Booking.com is to empower the business to make and implement informed, risk-based decisions
• Beyond establishing the overarching risk management frameworks and tooling, we also directly support many of the company’s top priorities and risk domains, for example through practical advice on the application of risk frameworks, driving risk assessments, supporting control design, and challenging risk decisions
• The Risk Manager is a role within the Risk & Control function, responsible for overseeing and performing risk management activities that directly support tech/product teams within a Business Unit
• The Risk Manager acts as an advisor to business unit stakeholders, and as a point of contact for the wider risk and compliance community across Booking.com
• Enables Business Unit Leadership in the effective implementation and operation of risk management in the business unit
• Advises tech/operational teams in risk identification and assessment, risk response plans and design & implementation of controls
• Provides SME support for all risk management activities owned by the Tech & Operational Teams, incl. supporting key business priorities/Must Do’s, major IT changes and new products
• Continuously monitors risks and controls
• Contributes to BU-level reporting to BU LT and other stakeholders
• Reviews exceptions (incl. control issues, policy exceptions) to identify and report on critical or thematic issues
• Advises BU stakeholders on key risks, escalates issues/risks where needed
• Facilitates adoption of frameworks and policies issued by 2nd line, and embedding of risk, security and compliance culture
• Where applicable, contributes to BU-level governance mechanisms, e.g. a risk forum, or a compliance committee
• Where required, defines business-specific risk management frameworks and procedures
• Drives and supports initiatives to elevate the maturity of risk management and compliance, including through training and awareness campaigns
• Collaborates with 2nd line and audit
• Collaborates with other Risk/Compliance functions for all new work instructions, e.g. relating to new regulations
• Closely collaborates with other key risk functions, including Security, Privacy, Legal, Compliance
• Coordinates topics that span multiple teams within the BU
• Coordinates audit activities (Operational & SOx), including audit readiness and tracking/reporting on audit finding remediation
• Coaches more junior risk professionals
• Actively contributes to the maturity of risk management across Booking.com

Benefits

• Health insurance
• Free access to Headspace for you and your loved ones
• Global Employee Assistance Program
• Meditation and Breastfeeding rooms at the office
• Booking Cares - 2 days per year to volunteer and learn
• Life insurance
• Disability insurance
• Pension plan
• Annual paid time off
• Parental leave - 22 weeks
• Grandparent leave - 10 days
• Care leave - 10 days
• Bereavement leave - up to 4 weeks
• Anniversary leave
• Working from Home Furniture and Ergonomic Support
• Working from Abroad - up to 20 days per year
• Discounts & Wallet credits to spend on our products
• Upgrade to Booking.com Genius Level 3
• Friends & Family Booking.com discount vouchers
• Free access to online learning platforms
• Development and mentorship programs to support career growth
• Access to trainings and workshops
• Team development opportunities
• Local discount programs
• Game rooms in offices
• On-site meals, coffee and snacks including vegan options- Qualifications related to any of the above are advantageous (incl. CRISC, CRM, CRMP, FRM, CISM, CCSP, CGEIT, CIPM, CPA, ACCA, CIA, CISA)
• Operational Risk Management
• Experience with high priority technology domains incl. Cybersecurity (NIST, ISO 27001), Cloud, Data, AI is advantageous
• Advanced risk management & compliance knowledge and experience including:
• Experience with large e-commerce or tech companies is advantageous
• Strongly process-, problem solving- and action-oriented
• 8+ years of experience in Risk Management
• SOx, ICOFR, COSO
• IT Risk Management and IT Governance
• Experience in other relevant compliance domains (e.g. GDPR, DMA, DSA, FCRM) is advantageous
• Strong stakeholder management skills
• Bachelor’s degree or higher in a relevant field (Master’s Degree is preferable). Alternatively compensating years of experience
• Fully comfortable working in English, both written and spoken
• Project and/or Line management experience is advantageous