Director of Risk and Controls - B2B

Booking Holdings (NASDAQ: BKNG) is the world leader in online travel and services that support the entire travel journey. Our platforms - including Booking.com, Priceline, Agoda, KAYAK and OpenTable - utilize advanced AI, machine learning and other innovative technologies to simplify and personalize the travel experience for consumers and partners in over 220 countries and territories. Our mission is to make it easier for everyone to experience the world. For more information, visit BookingHoldings.com and follow us on X @BookingHoldings.

This role is eligible for our hybrid work model: Two days in-office.

The B2B Director of Risk and Controls is a critical role with global scale. You will report directly to the B2B Controller with responsibilities to the Global Head of Enterprise Risk and Controls, leading a team as the second line of defense for enterprise risk management across business, IT, and financial controls.

This role is about balance — being hands on to ensure the new business remains fit for growth through pragmatic, agile controls. Over time, you will have the opportunity to shape an increasingly AI-augmented Risk & Control function — exploring how automation, data analytics, and emerging AI capabilities can enhance assurance and complement traditional testing approaches. We’re looking for a commercially minded, curious leader with strong business intuition and the ability to think big picture while owning details. You’ll build trust and earn a seat at the table through proactive risk management. Success in this role will be driven by critical partnership with the business focused on the best outcome for everyone, including shareholders.

The scope spans functions (Product, IT, Marketing, Finance) and BKNG’s B2B brands: Booking.com, Priceline, and Agoda. You’ll coordinate with Brand Risk and Control leads and serve as the key contact for Group Internal and External Auditors.

You’ll navigate organizational structures, designing business processes and controls to ensure compliance and risk management. This offers exposure to the Senior Leadership Team and strategic insight across BKNG.

In summary, this is an ideal role for an ambitious leader who wants to excel in a fast-growing, innovative eCommerce business while making a significant impact in balancing growth with risk.

In this role you will get to:

ICFR & SOX Compliance

• Create a Risk and Control Environment that will allow for the new sizeable business to report financial results externally adhering to all regulatory requirements.
• Operate as the B2B division’s Risk & Control leader within BKNG’s evolving enterprise ICFR governance framework — partnering with the Corporate Center R&C function on methodology alignment, deficiency assessment, and enterprise reporting in accordance with established decision rights and escalation protocols, while maintaining the independence and objectivity expected of the R&C function.
• Establish a Risk and Control Framework that clarifies RACI for ownership, measures control maturity, and aligns where necessary on cross-Brand dependencies.
• Maintain an effective internal control environment and full SOX compliance. Lead SOX efficacy and financial reporting controls, ensuring B2B division P&L accurately reflects operations and span of control. Support the quarterly certification process by preparing the B2B division’s ICFR reporting deliverables and ensuring the division’s representations are complete and consistent with known control matters.
• Own the B2B division’s deficiency identification and assessment process, ensuring timely communication of significant control matters to relevant enterprise stakeholders and maintaining accurate, current records in the enterprise GRC platform.
• Coordinate with Global Internal Audit and the external auditor on B2B ICFR activities — supporting independent assurance efforts, facilitating access to documentation and personnel, and aligning on scoping and deficiency matters consistent with the enterprise governance framework.

Enterprise Risk Management (ERM)

• Work closely with BKNG ERM, Brand functional risk owners, business owners, and the Brand CFO to ensure brand-level compliance with the ERM framework and processes.
• Facilitate the full brand-led ERM risk lifecycle, and act as the central repository for brand-level risk data.
• Provide assurance that significant brand-level exposures are managed within defined appetite and tolerances.

Risk & Control Design and Documentation

• Act as a Risk Committee gatekeeper, overseeing the end-to-end business footprint and establishing escalation paths and materiality thresholds for committee attention.
• Analyze and design business and IT processes to identify risks and control weaknesses — leveraging data analytics and AI-driven pattern recognition to surface emerging risks, unusual transaction patterns, and control breakdowns that manual review alone would miss.
• Guide business partners (e.g., process owners) in designing and implementing controls to strengthen the control environment and mitigate risks.
• Create and maintain comprehensive ICFR documentation — including process narratives, flowcharts, and risk and control matrices — and explore opportunities to use AI tools to accelerate documentation creation, keep narratives current as processes evolve, and surface gaps or inconsistencies across the control library.
• Lead and work to mitigate and remediate identified deficiencies with the business in a timely manner.

AI, Automation & Continuous Assurance

• Explore and develop a vision for continuous controls monitoring (CCM) — assessing where AI, automation, and data analytics could over time shift the B2B division’s control assurance model toward more real-time, exception-based monitoring, particularly for high-volume transaction flows across partner channels, APIs, and affiliate distribution.
• Evaluate and champion the use of AI, machine learning, and advanced analytics within the R&C function — including intelligent document review, automated evidence gathering, anomaly detection across financial data, and AI-assisted risk scoring — while staying current with evolving regulatory expectations around AI governance and responsible use.
• Identify and govern AI-specific risks within the B2B division’s operations — including risks arising from the use of AI/ML in pricing, partner onboarding, fraud detection, and revenue optimization — ensuring appropriate controls exist and that these risks are integrated into the broader risk and control framework.

Cross-Brand Leadership & Team Building

• Build and sustain trusted relationships across Booking.com, Priceline, and Agoda R&C teams, Brand CFOs, and functional leaders (Product, IT, Marketing, Finance) — working cross-brand and cross-functionally to drive alignment on shared risk priorities, consistent control standards, and collaborative problem-solving without relying on direct authority.
• Build and manage a new Risk & Control team with an eye toward developing a group that over time blends traditional controls expertise with data literacy and AI fluency — fostering a team culture that embraces automation, experimentation, and continuous improvement in how assurance is delivered.

What you have:

• A minimum of Bachelor’s degree in Accounting or Finance.
• Chartered Accountant, CPA, CISA or similar designation obtained from a top tier accounting/consultancy organisation is highly desirable.
• Excellent knowledge of auditing various business operations and risk-based auditing attained through minimum of 12 years of progressive work experience.
• Previous experience in leading and establishing risk and compliance function(s) in a complex, digital, and multijurisdictional organisation.
• Thorough understanding of internal control concepts (especially SOX & COSO) and experience in applying them in various business areas/functions.
• Experience of ITGCs and their place within the overall Control Landscape. In addition, some experience managing IT Risk professionals.
• Proven success in improving risk management, preferably in a fast-moving tech environment.
• Ability to work independently, productively and part of a team.
• Excellent Communication Skills.
• Exposure to or interest in deploying automation, data analytics, or AI/ML tools within a risk, controls, or audit function — whether through continuous monitoring programs, automated testing, anomaly detection, or intelligent workflow design.
• Experience with enterprise GRC platforms for ICFR scoping, testing, deficiency management, and reporting.
• Experience operating within structured governance and decision-rights frameworks across multi-brand or federated organizations.

SKILLS & COMPETENCIES

• Ability to navigate complex matrix organizations.
• High level of integrity is a MUST, and ability to constructively challenge.
• Superior influencing skills, particularly when without actual management authority.
• An eye to spot control risks with an intuition of risk prioritization.
• Curious, creative and innovative, particularly in designing proper controls without stiffening business growth.
• Flexibility to adapt to an ever evolving and dynamic work environment.
• Proactive, accountable self-starter with strong analytical, problem-solving, communication, and relationship-building skills, keen attention to detail, and a professional, results-oriented work ethic; able to think quickly, make confident decisions, improve processes, and take action.
• Proven ability to build trust and collaborative working relationships across multiple brands, cultures, and functional teams — earning credibility through partnership rather than positional authority.
• Comfort operating at the intersection of risk management and technology — with the judgment to distinguish where AI accelerates assurance from where human expertise and professional skepticism remain essential.
• Ability to evaluate and govern AI-related risks, including an understanding of how algorithmic decision-making, large language models, and automated processes create new control considerations.

Our Commitment to Inclusion 

Through the Booking Holdings brands, we help our customers reach all corners of the earth. Our ability to provide great service rests on how well we understand our diverse customer base, which is why having a diverse team is so important to us. We bring together employees from all walks of life and we are proud to provide the kind of inclusive environment that stimulates innovation, creativity and collaboration.

There are a variety of job related factors that go into determining a salary range, including but not limited to external market benchmark data, geographic location, and years of experience sought/required. In addition to a competitive base salary, roles are eligible to be considered for an annual bonus and equity grant.

The base salary range for Connecticut and the NYC-metro area is $176,000 - $215,000.

We are proud to offer a comprehensive benefits program designed to keep you and your family healthy, plan for the future and make the most out of life. For a glimpse of our benefits offerings, please see here. In addition to competitive health and wellness benefits, we currently offer other perks to eligible employees, such as: tuition reimbursement, fitness reimbursement, discounts, and more! 

If this role resonates with you, we encourage you to click the "apply" button!

EEO Statement:

Booking Holdings is an equal opportunity employer in accordance with all applicable federal, state and local laws. We ensure equal employment opportunity to all employees and applicants without discrimination or harassment based on race, religious creed, color, age, sex, sexual orientation, gender identity, national origin, religion, marital status, medical condition, disability, military service, pregnancy, childbirth and related medical conditions, or any other classification protected by federal, state, or local law.

Booking Holdings also extends this policy to every phase of the employment process including, but not limited to, recruitment, selection, placement, transfer, training and development, position elimination, restructure, promotion, compensation, benefits, layoffs, termination, and all other conditions or privileges of employment. Booking Holdings and its Affiliated Companies are Equal Employment Opportunity employers and welcome all job seekers including individuals with disabilities and veterans with disabilities. If you have a disability and believe you need reasonable accommodation in order to search for a job opening or apply for a position, please email [email protected] with your request. M/F/V/D/S

#LI-Hybrid