# Booking Holdings Romania - IT Risk & Compliance Officer (PCI) at Booking.com

Booking.com is hiring a Booking Holdings Romania - IT Risk & Compliance Officer (PCI) in Bucharest, Romania. Level rates it Little AI ●○○○; you can [apply on Booking.com](https://jobsbylevel.com/go/0c374eca-d16e-454e-a4a5-4e00bb868bcd?utm_medium=ai-agent).

AI Level 1, AI centrality 38 out of 100. Bucharest, Romania.

## Details

- Company: [Booking.com](https://jobsbylevel.com/companies/booking-com)
- AI level: AI Level 1 (score 38 out of 100)
- Location: Bucharest, Romania
- Posted: July 17, 2026
- Apply: https://jobsbylevel.com/go/0c374eca-d16e-454e-a4a5-4e00bb868bcd?utm_medium=ai-agent
- Free CV review for this job: https://jobsbylevel.com/cv-review?job=booking-holdings-romania-it-risk-compliance-officer-pci-at-booking-com-2b656a

## Description

Booking Holdings Romania is a Center of Excellence based in Bucharest, Romania and was created to support the increasing business demands of the Booking Holdings Brands. The Center of Excellence provides access to specialized and highly skilled talent, leading industry best practices, and collaboration opportunities across all of our Brands. As part of our Booking Holdings Romania team, you will have the opportunity to be a part of the world’s leading provider of online travel, with a mission of making it easier for everyone to experience the world through six-primary consumer facing brands: Booking.com, Priceline, Agoda, KAYAK, OpenTable and Rentalcars.com. Role description The Risk & Compliance Officer (PCI) is an individual contributor with expert-level domain knowledge, proactive and analytical professional with a strong foundation in risk management principles and control management and monitoring. A demonstrated ability to automate and monitor complex processes is a benefit. They will be responsible for partnering with multiple risk owners and business unit managers to identify the regulatory requirements from an IT perspective for PCI-DSS, SOX, NIS2 and other, and will drive appropriate control monitoring, IT compliance monitoring and implementation. The Risk & Compliance Officer (PCI) partners closely with internal and external PCI audit teams, IT Control owners and Business owners, to ensure consistency, timeliness and especially compliance with the PCI Certification requirements. This person must possess a strong understanding and experience of typical PCI IT And Audit phases and requirements and also exhibit versatility in various PCI tech domains and can build a comprehensive knowledge of the end-to-end Booking IT environment and pertinent PCI controls. The Risk & Compliance Officer (PCI) is also a subject matter expert leveraging a deep understanding of the enterprise risk discipline combining deep knowledge of theory and organizational practice or expertise across several different disciplines within a function. Successful risk expertise requires dynamic individuals who are able to liaise with various senior stakeholders and thus need to be articulate communicators, foster collaboration, integrate perspectives and drive to business beneficial outcomes. They will lead the PCI-DSS control efforts to ensure that the PCI requirements are translated into right-sized scalable controls, that audit readiness is maintained throughout the year and that evidence, remediation and risk decisions are coordinated effectively across a complex technology landscape. The role operates as a highly independent first-line risk partner, bridging engineering teams, control owners, internal auditors and external assessors, including QSA. This position requires strong stakeholder management skills and requires an individual who can convince others who are skeptical or unwilling to accept new concepts, practices, and approaches. This role provides a hybrid way of working with an onsite presence of 2 days/week. Key Job Responsibilities and Duties Leads the annual PCI-DSS recertification cycle end-to-end, including planning, scope maintenance, walkthrough preparation, evidence coordination, stakeholder management (follow up, communication, preparation), issue management and support for QSA and audit activities Acts as the PCI risk partner to platform, service, payments and engineering teams by translating PCI-DSS requirements into practical control expectations and right-sized guidance for cloud, on-prem and DevOps environments Leads PCI scoping reviews and risk assessments for new services, architectural changes and third-party integrations, and determines impacts to the cardholder data environment, connected systems, control design and evidence requirements. Designs, enhances and monitors technical and administrative controls and guardrails that keep PCI compliance embedded in engineering processes rather than added late in the delivery

The description is cut here. Read the full offer: https://jobsbylevel.com/jobs/booking-holdings-romania-it-risk-compliance-officer-pci-at-booking-com-2b656a

Source: https://jobsbylevel.com/jobs/booking-holdings-romania-it-risk-compliance-officer-pci-at-booking-com-2b656a

## Cite this page

Level. https://jobsbylevel.com/jobs/booking-holdings-romania-it-risk-compliance-officer-pci-at-booking-com-2b656a.

Get job alerts: https://jobsbylevel.com/newsletter