ТаиландRisk & Control, Technology Senior Specialist
2 нед. назад
ТаиландSenior
Senior specialist role in Risk & Control within Finance, focusing on risk management and assurance across business, technology, financial, and operational domains.
О компании
- At , we bridge the world through travel. Our story began in 2005, when two lifelong friends and entrepreneurs, driven by their passion for travel, launched to make it easier for everyone to explore the world.
- Today, we are part of Booking Holdings [NASDAQ: BKNG], with a diverse team of over 7,000 people from 90 countries, working together in offices around the globe. Every day, we connect people to destinations and experiences, with our great deals across our millions of hotels and holiday properties, flights, and experiences worldwide.
- No two days are the same at . Data and technology are at the heart of our culture, fueling our curiosity and innovation. If you’re ready to begin your best journey and help build travel for the world, join us.
Обязанности
- You'll partner across Product, IT, Supply, Commercial, People, Legal, Customer Service, and Finance — engaging at all levels to understand business processes and design technology controls that ensure compliance and sound risk management. As the main point of contact for IT stakeholders and internal/external auditors, this role requires strong leadership and communication skills to coordinate technology risk and compliance efforts across SOX, IT, and audit teams. It is not a policing role: success depends on building trust as a critical partner while proactively managing risk.
Требования
- Bachelor's degree in Accounting, Management Information Systems, Computer Science, Computer Engineering, or related field; professional certification (e.g., CISSP, CIA) preferred, or equivalent combination of education and experience.
- 6+ years' experience as an IT Auditor (external or internal) with a public accounting firm or public company.
- Strong understanding of internal control frameworks (SOX, NIST, CMMC, SOC, ITIL, COBIT, PCI, COSO) and how to apply them from a technology perspective.
- Demonstrated ITGC proficiency, with the ability to communicate complex issues clearly and simply.
- IT SOX management experience highly preferred; e-commerce or travel industry experience a plus.
- Able to work independently and collaboratively, with strong communication skills.
- Open to constructive feedback and continuous growth.
- Willing to adopt new tools, including AI, to support testing and reviews.
- Strong collaboration skills, particularly when without actual management authority
- An eye to spot control risks with an intuition of risk prioritization
- Self-starter with strong sense of responsibility, can do approach and open mindset
Будет плюсом
- Certified Internal Auditor (CIA), Certified Information System Auditor (CISA), CISSP, or similar designation.
- High level of integrity is a MUST and ability to constructively challenge.
- Curious, creative and innovative, particularly in design proper controls without stiffening the business growth
- Flexibility to adapt to an ever evolving and dynamic work environment
- Quick thinker and confident in decision making
- Process, problem solving and action orientated mindset
- Good analytical skills with strong attention to detail
- Excellent communication and relationship building skills
- Professional “get it done” attitude and strong work ethics
Другое
- The Risk & Control – Technology Senior Specialist role sits within Risk & Control, part of Finance, acting as 's second line of defense for risk management and providing timely assurance across business, technology, financial, and operational risk. As scales through innovation and data-driven experimentation, the team plays a critical role in balancing risk management with continued growth.
- is constantly expanding its reach through strategic innovations and data-driven experimentations. As a key stakeholder and enabler of the overall business, the Risk and Control team plays a unique role in balancing risk management without stifling innovation and growth.
- The ideal candidate has hands-on experience assessing technology controls across end-to-end business processes — including ICFR, SOX, and IT Operations — identifying technology risks and executing control testing. This is a strong fit for someone who wants to make a meaningful impact balancing growth and risk in a fast-growing, innovative technology business.
- Key areas of responsibility (Including but Not Limited To)
- Support the Risk & Control Leadership Team in maintaining a robust Enterprise Risk Management framework that enables growth and agility.
- Maintain and continuously mature 's internal control environment and full SOX compliance, including efficacy of financial reporting controls and their linkage to business processes.
- Contribute to a pragmatic control assessment, testing, and reporting framework with adequate coverage across 's operations.
- Analyze and/or design IT and business process controls (SOX and non-SOX) to identify risks, control weaknesses, and gaps.
- Guide business partners in designing and implementing controls that strengthen the control environment and mitigate risk.
- Support ITGC/ITAC testing and documentation — walkthroughs, risk and gap identification, test procedures, and workpapers.
- Create and maintain comprehensive documentation, including flow charts, process narratives, and risk and control matrices.
- Act as the subject matter expert and go-to resource on technology risk.
- Drive timely remediation of identified control deficiencies.
- Partner with internal and external stakeholders (process owners, auditors, outsourced providers) to build relationships and coordinate assurance activities.
- Support/lead the preparation and issuance of Risk & Control reports and Risk Committee reporting packs, plus ad hoc requirements.
- Act as a brand ambassador for the Risk & Control function across
- Careers
- YouTube