IT Risk & Compliance Analyst

As an IT Risk & Compliance Analyst at Farehabor, your role involves partnering with risk owners to design and maintain internal controls in alignment with the risk appetite and process quality. You will collaborate closely with the FH Business unit security officer and stakeholders from various departments to ensure a comprehensive understanding of processes. Key Responsibilities: - Lead Cyber Maturity Assessment for Farehabor entity - Must have 4+ years of domain experience - Support cross functional remediation tracking, monitoring, and reporting activities - Drive operational risk governance processes for Farehabor entity, including maintaining cyber risk register, security exceptions, audit, and pentest issue remediation status - Collaborate in building and maintaining the NIST Control framework with FH Risk officer and Information security officer for FH technology teams - Develop an understanding of FH internal controls, systems, and process landscape to identify and update risks in the cyber risk register - Support Risk and Governance processes with stakeholders in Amsterdam and the US - Assist in the inventory and update of cyber risks - Provide in-house consulting as a subject matter expert on NIST related activities Qualifications Required: - First experience in business analysis, auditing, corporate governance, risk management, or internal controls - Ability to establish strong relationships with business partners to promote a risk management culture - Basic technical understanding of internal control requirements and design, with experience in application across different businesses - Flexibility to adapt to dynamic business needs while maintaining robust solutions for the IT control environment - Strong ability to break down large tasks into manageable actions, ensuring effective management and timely delivery - Agility in response to changes in business, stakeholder expectations, or regulatory/operating environment of Booking.com - Independent contributor with a strong team player mindset In case your application is successful, please note that your personal data may undergo pre-employment screening by a third party for a comprehensive check as permitted by applicable law. This screening may include verification of employment history, education, and other relevant information to assess your qualifications for the position.,