Role Description:
About Us: At Booking.com, data drives our decisions. Technology is at our core. And innovation is everywhere. But our company is more than datasets, lines of code or A/B tests. We’re the thrill of the first night in a new place. The excitement of the next morning. The friends you encounter. The journeys you take. The sights you see. And the memories you make. Through our products, partners and people, we make it easier for everyone to experience the world.

QUALIFICATIONS & SKILLS:

• Bachelor’s or Master’s degree in Risk Management, Information Systems, HR Technology, or equivalent experience.
• Certifications (e.g., CISA, CRISC, CIPM) are a plus.
• Understanding of global HR and payroll operations and technologies (e.g., Workday, SAP), IT governance frameworks (SOX, COBIT), and regulatory compliance is highly desirable.
• Ability to translate technical risks into business impacts.
• Proactive and independent, capable of driving collaboration across teams.
• Skilled at navigating a dynamic environment and maintaining a network of contacts.

ROLE DESCRIPTION:

At the heart of our People (HR and Payroll) operations, this role is key in embedding effective risk management and compliance within our HR technology landscape. You’ll be the go-to specialist for ensuring our HR systems, data, and processes are secure, compliant, and operating effectively. As a first-line risk, you will work closely with the People, IT, and Risk teams to proactively identify, assess, and mitigate risks—while improving process efficiency and supporting our business objectives.
This global role focuses on HRIS and payroll-related technology platforms, ensuring these systems meet internal control standards (such as SOX), comply with regulatory requirements, and align with best IT governance and risk management practices.

KEY JOB RESPONSIBILITIES AND DUTIES:

• Embed risk awareness and compliance in People processes and systems (Workday, payroll platforms, etc.).
• Monitor business and IT controls for SOX, data privacy, and internal policy compliance.
• Identify risk and control gaps in HR processes and collaborate with stakeholders on mitigations.
• Assist control owners with guidance and testing for clear and consistent control execution.
• Review application-level controls, general IT controls (ITGCs), and segregation of duties in HRIS platforms.
• Collaborate with HRIS teams on role-based access and least privilege principles.
• Enhance process maturity and control effectiveness through data-informed assessments and support initiatives to improve internal controls within the People function.