Senior Analyst, Business Process Risk and Controls

Priceline•Norwalk, CT

9h•Hybrid

About The Position

Booking Holdings (NASDAQ: BKNG) is the world's leading provider of online travel and related services, provided to consumers and local partners in more than 220 countries and territories through five primary consumer-facing brands: Booking.com, Priceline, Agoda, KAYAK and OpenTable. The mission of Booking Holdings is to make it easier for everyone to experience the world. For more information, visit BookingHoldings.com and follow us on X (formerly known as Twitter) @BookingHoldings. This role is eligible for our hybrid work model: Two days in-office. Business Process Senior Analyst, Risk & Controls role is an integral part of the Booking Holdings Risk & Controls (R&C) Team. This position will report to the Manager, Risk & Controls and assist in performing a broad range of operational and financial risk management responsibilities, including planning and execution of Sarbanes Oxley Act (SOX) compliance, being an independent trusted advisor to the first line of defense to enable informed risk-based decisions, as well as developing and implementing guidance, training, and enablement to the Booking Holdings and brands to mature the internal controls program. In this role you will get to: Support Independent Oversight: Support oversight of operational and financial risks at Booking Holdings, including end-to-end process reviews to drive internal and external compliance and efficiencies. Risk Identification and Assessment: In close collaboration with finance teams and brand risk and controls counterparts, assist in identifying, assessing, and managing key operational and financial risks (including business process scoping and risk assessments) for Booking Holdings and Brand processes. Internal Controls Certification: Own the internal process and control certifications and perform quarterly reporting procedures to support 302 certifications. Mature R&C Program: Support key initiatives to mature the R&C program through cross-brand SOX training efforts, guidance, and enablement, including development, maintenance, and presentation of training materials. Strategic Program Support: Support management in select strategic programs and initiatives, such as new business integration and global finance transformation, by supporting designated workstreams. SOX Compliance ICFR Program Execution: Execute the ICFR Program activities for Booking Holdings, including developing and maintaining internal control documentation (process flow, narratives, risk and control matrices), and designing controls to mitigate financial reporting risk. Control Testing: Perform project management oversight related to business process SOX testing by others (including review of testing workpapers), coordinate walkthroughs, manage evidence collection, independently test controls for design and operating effectiveness, and ensure timely and accurate reporting of test results. Deficiencies Assessment and Remediation: Assist process and control owners with deficiency impact assessments (including determining root causes) and facilitate implementation of remedial changes. Perform monitoring over remediated controls to verify compliance. COSO Framework: Assist with maintenance and assessment of Entity Level Controls, including mapping to the COSO Framework to ensure enterprise-wide compliance. Collaboration and Communication Interdepartmental Collaboration: Collaborate and liaise with control and process owners, providing expert advice on critical matters related to internal controls, including identifying and documenting key controls and processes, assessing policy compliance, and serving as the primary point of contact to ensure a cohesive approach to risk management and compliance. Stakeholder Coordination: Coordinate with stakeholders, such as Global Internal Audit (GIA), external auditors, brand R&C, and others, providing direct support and maintaining relationships with these departments.

Requirements

Public Accounting (Big 4)
Internal Audit/Risk & Controls Function of a listed company
Support SOX programs, process management and/or risk management involvement within complex industries.
Extensive knowledge of SOX and risk-based testing of various business processes.
experience with SOX compliance.
Ability to work independently and manage multiple priorities in a fast-paced environment.
Strong written and verbal communication skills, with the ability to present complex information clearly and concisely.
Self-directed team player and detail-oriented
Strong analytical, problem-solving, and decision-making skills.
US GAAP and COSO Framework knowledge
Strong time management and organizational skills.

Nice To Haves

Experience with AuditBoard is desirable.
Experience and/or willingness to explore AI for control compliance efficiencies

Responsibilities

Support Independent Oversight: Support oversight of operational and financial risks at Booking Holdings, including end-to-end process reviews to drive internal and external compliance and efficiencies.
Risk Identification and Assessment: In close collaboration with finance teams and brand risk and controls counterparts, assist in identifying, assessing, and managing key operational and financial risks (including business process scoping and risk assessments) for Booking Holdings and Brand processes.
Internal Controls Certification: Own the internal process and control certifications and perform quarterly reporting procedures to support 302 certifications.
Mature R&C Program: Support key initiatives to mature the R&C program through cross-brand SOX training efforts, guidance, and enablement, including development, maintenance, and presentation of training materials.
Strategic Program Support: Support management in select strategic programs and initiatives, such as new business integration and global finance transformation, by supporting designated workstreams.
SOX Compliance ICFR Program Execution: Execute the ICFR Program activities for Booking Holdings, including developing and maintaining internal control documentation (process flow, narratives, risk and control matrices), and designing controls to mitigate financial reporting risk.
Control Testing: Perform project management oversight related to business process SOX testing by others (including review of testing workpapers), coordinate walkthroughs, manage evidence collection, independently test controls for design and operating effectiveness, and ensure timely and accurate reporting of test results.
Deficiencies Assessment and Remediation: Assist process and control owners with deficiency impact assessments (including determining root causes) and facilitate implementation of remedial changes. Perform monitoring over remediated controls to verify compliance.
COSO Framework: Assist with maintenance and assessment of Entity Level Controls, including mapping to the COSO Framework to ensure enterprise-wide compliance.
Collaboration and Communication Interdepartmental Collaboration: Collaborate and liaise with control and process owners, providing expert advice on critical matters related to internal controls, including identifying and documenting key controls and processes, assessing policy compliance, and serving as the primary point of contact to ensure a cohesive approach to risk management and compliance.
Stakeholder Coordination: Coordinate with stakeholders, such as Global Internal Audit (GIA), external auditors, brand R&C, and others, providing direct support and maintaining relationships with these departments.

Benefits

In addition to competitive health and wellness benefits, we currently offer other perks to eligible employees, such as: tuition reimbursement, fitness reimbursement, discounts, and more!

Stand Out From the Crowd

Upload your resume and get instant feedback on how well it matches this job.

Upload and Match Resume