Key Responsibilities and Duties

• Attract, engage, develop, and retain talent to their full potential by fostering a supportive work environment that emphasizes continuous feedback, coaching, and mentorship programs, ensuring comprehensive growth for all crafts.
• Coaching your team on and consistently role model the Booking values on Think Customer First, Own It, Learn Forever, Succeed Together, and Do the Right Thing.
• Drive initiatives effectively involving multiple technical first-line senior stakeholders, re-prioritising tasks when beneficial.
• Formulate and implement tactical plans and objectives within Platform Risk Management that are in alignment with Central Tech business objectives and ensure the achievement of annual goals. Establish team priorities, delegate projects, allocate resources, and provide regular communication to management and business partners regarding business performance and project progress.
• Advise first-line stakeholders with specialized knowledge and expertise in IT risk, cybersecurity and regulatory compliance risk. Assume responsibility for the identification of technological risks and the formulation of control design proposals. Offer guidance on control design that is sustainable and appropriately scaled, ensuring that solutions are commensurate with the complexity of the issues addressed and avoiding unnecessary overengineering.
• Drive business engagement in the Central Tech business unit to provide risk and compliance awareness for teams that have a clear need to manage risks without significantly affecting their development velocity and/or play a key role towards achieving strategic objectives in the company.
• Develop and maintain IT and security policies and procedures for secure software development & collaborate with development teams to integrate secure software development practices and principles into CI/CD pipelines.
• Support senior stakeholders across central tech helping to promote and embed risk and compliance ownership across the business as well as to broaden and expand their knowledge base of both the internal and external risk environment.
• Follow broader ERM strategy defined by R&C and implement it into execution within the first-line of defense (business) and drive continuous improvement of risk assessment methodologies through ongoing collaboration with second-line risk and controls teams, ensuring alignment with practical business objectives.
• Support the team to identify ways to increase their business impact and improve the team’s product(s) and ways of working.
• Liaise with other risk and audit teams (Risk and Controls, Internal Audit, external auditors, etc.) to provide a more in-depth technical risk perspective, as needed.
• Stay current with emerging cyber threats and security best practices in DevOps environments.

Knowledge and Skills

• Technical Specialization:
• Strong risk and control or audit/assurance background with a deep understanding of operational and technology risk
• Strong working experience with IT General Controls (ITGCs), especially in fast-paced DevOps environments
• Strong understanding of technology risk management, controls, and compliance, especially for public cloud platforms and DevOps Tooling
• Experience and understanding of applicable regulations such as Sarbanes Oxley, PCI-DSS, GDPR and CCPA
• Familiarity with industry-standard Cybersecurity regulatory frameworks such as NIST, ISO27001 and CIS
• Understanding of cybersecurity risks and data protection principles
• Technical AWS certifications (AWS Certified Solutions Architect, AWS Certified Security) are a plus
• Knowledge of secure software development practices and tooling (SAST, DAST, and SCA tools)
• Ability to cultivate solid relationships with business partners in order to drive the adoption of the risk management culture
• Thorough technical understanding of internal control requirements and design and experience in applying them in various businesses
• Able to split large tasks into logical, manageable and decoupled actions which are managed effectively and delivered on time
• Be flexible and agile in response to the change in business, change in stakeholder expectations and/or change in regulatory/operating environment of B.com
• Level of Education: Bachelor/Master
• Years of relevant Job Knowledge: Extensive Knowledge (8 - 12 years)

Benefits & Perks: Global Impact, Personal Relevance

• Headquarters located in one of the most dynamic and cosmopolitan cities in Europe: Amsterdam.
• Contribute to a high‑scale, sophisticated, world‑class product and see the real‑time impact of your work on millions of travelers worldwide.
• Be part of a truly international fast‑paced environment and performance‑driven culture.
• Full relocation support for you and your family to move to Amsterdam.
• Performance‑based company that offers 29 vacation days, career advancement, and lucrative compensation, including bonuses and stock potential.
• Discount on Booking.com accommodations with the “Booking Deal” including other perks and benefits.
• Company‑sponsored family and social activities to help our employees become integrated with each other and Dutch culture.
• Diverse and creative colleagues from every corner of the world.
• Health, life, and disability insurance.
• Annual paid time off and generous paid leave scheme including: parent, grandparent, bereavement, and care leave.
• Hybrid working including flexible working arrangements, and up to 20 days per year working from abroad (home country).
• Industry‑leading product discounts for yourself, friends, and family, including automatic Genius Level 3 status and quarterly Booking.com wallet credit.
• Free access to online learning platforms, development and mentorship programs, and a complimentary Headspace membership.
• On‑site meals, coffee, and snacks, including healthy and vegan options, daily.