Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 24 days ago

Fintech Risk Officer

workingatbooking126 open roles

Where
Amsterdam, North Holland, Netherlands
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowFintech Risk Officerworkingatbooking · Amsterdam, North Holland, Netherlands

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on workingatbooking's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

11.8% of postings close within 7 days. Measured by our own scanner across the market. workingatbooking postings stay open a median of 1 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.4%3 days
  3. 11.8%7 days
  4. 18.6%14 days
  5. 35.6%30 days
  6. 45.1%60 days
This job: posted 24 days ago

workingatbooking median: 1 days open

The posting

About Us

At Booking.com, data drives our decisions, technology is at our core, and innovation is everywhere. Through our products, partners and people, we make it easier for everyone to experience the world.

Role Overview

We are looking for a Risk Officer to join our FinTech Business Unit Risk Partner team, operating as the first line of defence. You'll partner with the Product/tech teams of Fintech as a risk subject-matter expert and help implement a robust Risk Management Process and Internal Control Framework, ensuring that business processes and IT systems operate effectively, comply with internal policies and external regulations, and that risks - including those arising from emerging technologies such as AI/ML and automation - are identified, assessed and managed proactively. In this role you'll act as the bridge between operational business requirements and technical IT controls.

Key Responsibilities

  • Own risk identification and assessment across the FinTech business unit's processes and IT systems, evaluating and mitigating risks, tracking them through to formal resolution, and maintaining the risk register and remediation plans so that exposure stays visible and managed.
  • Design, implement and operate controls within FinTech products and platforms - including IT general controls, IT automated controls (ITACs) and reconciliation controls - across a modern, cloud-native environment of cloud services, containers, CI/CD pipelines and microservices.
  • Act as a SOx design authority, partnering with FinTech stakeholders to ensure critical SOx controls are adequately designed and documented, strengthening the control environment and supporting the business in achieving its objectives while keeping company risk in check.
  • Guide stakeholders through observations and deficiencies, providing subject-matter expertise from initial assessment and triage all the way through to mitigation and remediation at root cause.
  • Represent FinTech in internal, external and statutory audits and SOC engagements from the auditee side - leading walkthroughs, preparing evidence and control narratives, and responding to audit and regulatory requests.
  • Partner with Security and Fraud teams on internal and external fraud cases, translating case findings into concrete, durable control improvements that reduce the likelihood of similar events recurring.
  • Assess risks from emerging technologies such as AI/ML, GenAI, agentic AI and automation (RPA), and help design proportionate controls aligned to frameworks such as the EU AI Act and the organisation's AI risk management approach.
  • Embed risk ownership and a shift-left mindset within FinTech product and tech teams through enablement and training, and mentor and uplift junior members of the risk team.

Qualifications

  • 7+ years of experience in internal controls, audit, risk management or compliance, with a bachelor's degree or higher in a relevant field.
  • Hands-on experience leading risk assessments and financial audits in a technologically dynamic environment, going beyond the standard risks around Access and Change Management.
  • Strong knowledge of IT control frameworks (COSO, COBIT, ITIL, NIST, DORA, ISO 27001 etc.) and regulatory requirements (SOX, GDPR, DMA, DSA), with experience applying them across different business areas.
  • Hands-on knowledge of e-money and payments regulations (e.g. PSD2) is a strong plus, particularly in applying them to real products and controls.
  • Practical risk-management experience in modern engineering environments, working with DevOps and open-source tooling such as GitLab, GitHub, Jenkins, Docker, Kubernetes, Terraform or Puppet.
  • Familiarity with designing controls for cloud platforms is a strong plus, particularly AWS (GCP an advantage), along with exposure to data governance, SaaS applications, business continuity management and emerging technologies (AI/ML, RPA).
  • An IT-related degree and/or professional certifications such as CISA, CISM, CRISC, CISSP.
  • Strong stakeholder engagement and communication skills, with the ability to build relationships that drive a risk-management culture across the business.
  • A self-starter who makes sound decisions, resolves problems effectively, and thrives in a changing, agile environment.
  • Fully comfortable working in English, both written and spoken (additional languages a plus).

Benefits & Perks - Global Impact, Personal Relevance:

Booking.com’s Total Rewards Philosophy is not only about compensation but also about benefits. We offer a competitive compensation and benefits package, as well unique-to-Booking.com benefits which include:

  • Annual paid time off and generous paid leave scheme including: parent, grandparent, bereavement, and care leave
  • Hybrid working including flexible working arrangements, and up to 20 days per year working from abroad (home country)
  • Industry leading product discounts - up to 1400 per year - for yourself, including automatic Genius Level 3 status and Booking.com wallet credit

Pre-Employment Screening

If your application is successful, your personal data may be used for a pre-employment screening check by a third party as permitted by applicable law. Depending on the vacancy and applicable law, a pre-employment screening may include employment history, education and other information (such as media information) that may be necessary for determining your qualifications and suitability for the position.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against workingatbooking's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on workingatbooking's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    workingatbooking's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.