Booking.com / Vacatureforum

Fintech Risk Officer – Booking.com – Amsterdam

Jobid: 3196496475 (0.11)

Overview

In this role you will partner with FinTech product and tech teams to own risk identification, assessment, and remediation across processes and IT systems. You will design and operate controls in a cloud-native environment, align with SOX and regulatory requirements, and address risks from emerging technologies like AI/ML. You’ll lead audits and collaborate with Security, Fraud, and governance teams to strengthen the control environment and protect business objectives. You will mentor junior risk teammates and foster a proactive risk ownership culture.

Arbeidsvoorwaarden / Benefits

  • Annual paid time off
  • Hybrid working with flexible arrangements
  • Up to 20 days per year abroad
  • Industry-leading product discounts
  • wallet credit
  • Genius Level 3 status

Verantwoordelijkheden

  • Own risk identification and assessment across FinTech processes and IT systems; maintain risk register and remediation plans
  • Design, implement and operate IT general and automated controls (ITGCs, ITACs) across cloud-native environments
  • Act as SOX design authority; document and validate critical SOX controls
  • Guide stakeholders from assessment to remediation, communicating findings and root causes
  • Represent FinTech in internal/external audits and SOC engagements; prepare evidence and narratives
  • Partner with Security and Fraud teams to translate findings into durable controls
  • Assess risks from AI/ML, GenAI, and RPA; design proportionate controls per EU AI Act and internal risk framework
  • Embed risk ownership and provide enablement/training to teams; mentor junior risk members

Belangrijkste vereisten

  • 7+ years in internal controls, audit, risk management or compliance
  • Bachelor or higher in a relevant field
  • Experience leading risk assessments and financial audits in a dynamic tech environment
  • Strong knowledge of IT control frameworks (COSO, COBIT, ITIL, NIST, DORA, ISO 27001) and regulatory requirements (SOX, GDPR, DMA, DSA)
  • Experience applying regulations across business areas; e-money and payments regs (PSD2) is a plus
  • Hands-on with DevOps and open-source tooling (GitLab, GitHub, Jenkins, Docker, Kubernetes, Terraform, Puppet)
  • Familiarity with designing controls for cloud platforms (AWS; GCP a plus) and data governance; BCM and emerging tech (AI/ML, RPA)
  • IT-related degree and/or professional certifications (CISA, CISM, CRISC, CISSP)
  • Strong stakeholder engagement and communication; self-starter; adaptable in agile environments
  • English proficiency (written and spoken); additional languages a plus
  • Stakeholder engagement
  • Communication
  • Self-starter
  • COSO
  • COBIT
  • ITIL

Lees hier meer…

Deel deze vacature: