# Risk and Compliance Officer at Booking.com

Booking.com is hiring a Risk and Compliance Officer in Amsterdam, Netherlands. Level rates it Little AI ●○○○; you can [apply on Booking.com](https://jobsbylevel.com/go/d5faf113-a150-4981-8b06-1efd917daf3e?utm_medium=ai-agent).

AI Level 1, AI centrality 25 out of 100. Amsterdam, Netherlands.

## Details

- Company: [Booking.com](https://jobsbylevel.com/companies/booking-com)
- AI level: AI Level 1 (score 25 out of 100)
- Location: Amsterdam, Netherlands
- Posted: October 26, 2026
- Apply: https://jobsbylevel.com/go/d5faf113-a150-4981-8b06-1efd917daf3e?utm_medium=ai-agent
- Free CV review for this job: https://jobsbylevel.com/cv-review?job=risk-and-compliance-officer-at-booking-com-0bdaf0

## Description

The DMLP 1st Line Risk & Compliance Officer owns the day-to-day coordination of risk, audit, and compliance activities for Booking.com's data and machine learning systems including Kafka, Flink, BDX, MySQL, and AI/ML platforms. This role establishes clear ownership, processes, and documentation across the DML risk landscape, acting as the primary risk partner to platform and service owners in this domain. B.responsible Risk & Compliance Partnership : Act as the 1st line risk partner to DML platform owners and data teams (Kafka, Flink, BDX, MySQL, AI/ML systems), advising on risk exposure and tailoring PCI-DSS, NIST, SOX, and any other regulatory compliance requirements to data and ML environments. Discovery & Risk Assessments : Lead discovery reviews and risk assessments across data and AI/ML systems, identifying gaps in ownership, controls, and documentation, and driving remediation with the relevant control owners. Control Ownership & R&R Clarity : Maintain clear roles and responsibilities (R&R) documentation for DML ITGCs (e.g., BDX DMA), ensuring every control has a named 1st line owner and a defensible rationale grounded in official documentation. Audit & Compliance Follow-Up : Coordinate and lead platform compliance controls and audit follow-ups and matters, tracking remediation actions to closure and liaising with 2nd line/audit stakeholders. Risk Register & Reporting : Maintain the DML risk inventory, report on risk coverage, issues, and remediation status through tools such as JIRA and ServiceNow. Right-Sized Control Design : Provide advice on control design that is sustainable and right-sized simple solutions for simple problems, avoiding overengineering while keeping controls effective. Stakeholder Coordination & TRO representation : Establish relationships with senior stakeholders. Build and maintain robust relationships across engineering, platform ownership, and risk/audit teams to keep ownership, processes, and documentation aligned as the DML platform evolves. Continuous Improvement : Identify opportunities to automate manual compliance and reporting bottlenecks, and refine risk assessment methodology to keep pace with a fast-moving data/AI environment. B.skilled Comfortable coordinating across many stakeholders with minimal day-to-day supervision , in a fast-changing, sometimes ambiguous environment. Strong documentation and communication skills and able to translate technical risk into clear, concise, business-friendly language. Platform Risk & Cloud Fluency : Broad job knowledge (typically 5–8 years) in IT risk, audit, or controls, with hands-on exposure to cloud environments (AWS preferred) and the ability to translate data platform and streaming architecture Kafka, Flink, BDX, MySQL, AI/ML pipelines into concrete risk assessments and control requirements. Control Framework Depth : Practical, applied knowledge of SOX and PCI-DSS, with the judgment to right-size controls so they stay effective and audit-ready without adding unnecessary friction for engineering teams. Audit Support Experience : Comfortable preparing evidence, coordinating walkthroughs, and drafting remediation memos for internal/external audit and SOX cycles. Structured Problem Solving : Able to work from individual findings toward reusable patterns, flagging when a local issue looks systemic so the wider team can decide on a shared guardrail. Clear Communicator : Can translate technical risk into plain language for engineering, platform, and audit stakeholders, and hold a respectful but firm line in day-to-day discussions. Certifications : CRISC (or actively working toward it) is preferred; the domains of Governance , IT Risk Assessment , Risk Response & Reporting , and Information Technology & Security map directly onto this role's daily work. CISA or equivalent is a plus. Strategic Leadership & Confidence: Demonstrated ability to lead risk strategy with confidence and conviction. You are comfortable challenging senior stakeholders,

The description is cut here. Read the full offer: https://jobsbylevel.com/jobs/risk-and-compliance-officer-at-booking-com-0bdaf0

Source: https://jobsbylevel.com/jobs/risk-and-compliance-officer-at-booking-com-0bdaf0

## Cite this page

Level. https://jobsbylevel.com/jobs/risk-and-compliance-officer-at-booking-com-0bdaf0.

Get job alerts: https://jobsbylevel.com/newsletter