Risk & Control Officer
Booking.com · Bengaluru, Karnataka
ABOUT BOOKING HOLDINGS :
Booking Holdings (NASDAQ: BKNG) is the world's leading provider of online travel and related services, provided to consumers and local partners in more than 220 countries and territories through five primary consumer-facing brands: Booking.com, Priceline, Agoda, KAYAK and OpenTable. The mission of Booking Holdings is to make it easier for everyone to experience the world. For more information, visit BookingHoldings.com and follow us on X (formerly known as Twitter) @BookingHoldings.
ABOUT THE ROLE :
The Business Process Senior Analyst, Risk & Controls role is an integral part of the Booking Holdings Risk & Controls (R&C) Team, based in the BHI India Center of Excellence (CoE) in Bengaluru.
This position will report to the Manager, Risk & Controls and assist in performing a range of operational and financial risk management responsibilities, including:
- Planning and execution of Sarbanes‑Oxley Act (SOX) compliance for business process controls (primary role responsibility).
- Supporting Risk & Controls initiatives such as maturing the Risk & Controls program, preparing SOX program deliverables, and developing and implementing guidance and trainingActing as an independent, trusted advisor to the first line of defense to enable informed risk‑based decisions.
IN THIS ROLE YOU WILL GET TO :
1. Controls Testing – Design and Operating Effectiveness
- Plan and execute SOX control testing over business process controls and entity level controls.
- Confirm scope and population of in‑scope controls for assigned processes.
- Define and document test plans, attributes and procedures.
- Perform project management oversight related to business process SOX testing.
- Independently test controls for design and operating effectiveness.
- Coordinate walkthrough and manage evidence collection with stakeholders (First-line) and auditors, including alignment on timing.
- Collaborate & participate within R&C to continuously improve the R&C’s capabilities and governance from SOX testing standpoint.
2. Deficiency assessment, remediation and monitoring
- Assist process and control owners with deficiency impact assessments, including:
- Determining root causes and potential financial statement impact.
- Assessing severity and whether compensating controls exist.
- Preparing the deficiency impact assessment documentation for stakeholder and Manager review.
- Facilitate implementation of remedial changes, advising on enhancements to process and control design.
- Perform monitoring over remediated controls to verify that remediation has been implemented effectively and is operating as intended.
3. Collaboration and Communication
- Collaborate and liaise with control and process owners, providing expert advice on critical matters related to internal controls.
- Coordinate with stakeholders such as Global Internal Audit (GIA), external auditors, brand R&C teams and others, providing direct support and maintaining strong working relationships with these departments.
- Participate and assist in BHI R&C team’s key initiatives such as maturing the Risk & Controls program, support independent oversight and risk assessment, and execute ICFR program deliverables.
WHAT YOU MUST HAVE :
- 5+ years of experience gained within compliance, internal controls, internal/external audit, including experience working with teams in an international environment.
- Extensive knowledge of SOX and risk‑based testing of business processes; demonstrated experience with SOX compliance for business process controls.
- Knowledge of US GAAP and the COSO Framework.
- Ability to work independently, manage multiple priorities and develop strong relationships with business partners..
- Fluent in English with strong written and verbal communication skills, with the ability to present complex information clearly and concisely.
- Energetic and Proactive.
- Strong analytical, problem‑solving and decision‑making skills.
- Relevant Bachelor’s degree required
NICE TO HAVE :
- Professional certifications such as ACCA, CPA, CIA, CRMA (or equivalent) are a plus.
- Experience with IT SOX (ITGC and/or ITAC) is preferred / considered a plus.
- Strong project management skills and experience coordinating cross‑functional initiatives are a plus.
- Experience with AuditBoard is desirable.
- Experience and/or willingness to explore AI for control‑compliance efficiencies.
ROLE CONTEXT – INDIA COE :
Based in Bengaluru, India, this role sits within the BHI India CoE and supports global Booking Holdings and brand stakeholders. You will be part of a growing hub that focuses on high‑impact work in risk, controls and financial transformation, while benefiting from a hybrid working model and collaboration across time zones and functions.
Pre-Employment Screening
If your application is successful, your personal data may be used for a pre-employment screening check by a third party as permitted by applicable law. Depending on the vacancy and applicable law, a pre-employment screening may include employment history, education and other information (such as media information) that may be necessary for determining your qualifications and suitability for the position.