Fintech Risk Officer

About Us

At Booking.com, data drives our decisions, technology is at our core, and innovation is everywhere. Through our products, partners and people, we make it easier for everyone to experience the world.

Role Overview

We are looking for a Risk Officer to join our FinTech Business Unit Risk Partner team, operating as the first line of defence. You'll partner with the Product/tech teams of Fintech as a risk subject-matter expert and help implement a robust Risk Management Process and Internal Control Framework, ensuring that business processes and IT systems operate effectively, comply with internal policies and external regulations, and that risks - including those arising from emerging technologies such as AI/ML and automation - are identified, assessed and managed proactively. In this role you'll act as the bridge between operational business requirements and technical IT controls.

Key Responsibilities

• Own risk identification and assessment across the FinTech business unit's processes and IT systems, evaluating and mitigating risks, tracking them through to formal resolution, and maintaining the risk register and remediation plans so that exposure stays visible and managed. • Design, implement and operate controls within FinTech products and platforms - including IT general controls, IT automated controls (ITACs) and reconciliation controls - across a modern, cloud-native environment of cloud services, containers, CI/CD pipelines and microservices. • Act as a SOx design authority, partnering with FinTech stakeholders to ensure critical SOx controls are adequately designed and documented, strengthening the control environment and supporting the business in achieving its objectives while keeping company risk in check. • Guide stakeholders through observations and deficiencies, providing subject-matter expertise from initial assessment and triage all the way through to mitigation and remediation at root cause. • Represent FinTech in internal, external and statutory audits and SOC engagements from the auditee side - leading walkthroughs, preparing evidence and control narratives, and responding to audit and regulatory requests. • Partner with Security and Fraud teams on internal and external fraud cases, translating case findings into concrete, durable control improvements that reduce the likelihood of similar events recurring. • Assess risks from emerging technologies such as AI/ML, GenAI, agentic AI and automation (RPA), and help design proportionate controls aligned to frameworks such as the EU AI Act and the organisation's AI risk management approach. • Embed risk ownership and a shift-left mindset within FinTech product and tech teams through enablement and training, and mentor and uplift junior members of the risk team.