Manager - IT Risk

About Us:

At , data drives our decisions. Technology is at our core. And innovation is everywhere. But our company is more than datasets, lines of code or A/B tests. We’re the thrill of the first night in a new place. The excitement of the next morning. The friends you encounter. The journeys you take. The sights you see. And the memories you make.

Through our products, partners and people, we make it easier for everyone to experience the world.

The role of the Risk & Control function within  is to empower the business to make and implement informed, risk-based decisions. Beyond establishing the overarching risk management frameworks and tooling, we also directly support many of the company’s top priorities and risk domains, for example through practical advice on the application of risk frameworks, driving risk assessments, supporting control design, and challenging risk decisions.

The Risk Manager - IT Risk is a role within the Risk & Control function, responsible for overseeing IT risk domains and programmes, especially those with cross-functional impact, providing a horizontal view of risk across the company and acting as the conscience of the organisation. The Risk Manager acts as an advisor and ensures alignment with the wider risk and compliance community.

• Performs thematic reviews and scenario assessments
• Acts as Primary Risk POC for Large Horizontal Programs
  • Provides risk oversight and advice at a programme level, and coordinates risk management activities with relevant Risk Partners and risk domain SMEs (e.g. Compliance, Legal, Security)
• Acts as point of escalation for first line (risk) teams in relation to high risks, or high impact issues or events potentially impacting multiple BUs and/or risk domains
• Reviews and challenges risk mitigation, incl. through participation in oversight/governance forums
• Supports ERM, Risk Framework Maturity, Training and other objectives led by Frameworks & Tooling and Internal Controls and facilitate rollout to the wider business
• Coaches more junior risk professionals

• 8+ years of experience in (IT) Risk Management
• Bachelor's degree or higher in a relevant field (Master’s Degree is preferable). Alternatively compensating years of experience
• Advanced risk management & compliance knowledge and experience including:
  • IT Risk Management and IT Governance
  • Operational Risk Management
  • SOx, ICOFR, COSO
  • Experience in other relevant compliance domains (e.g. GDPR, DMA, DSA, FCRM) is advantageous
  • Experience with high priority technology domains incl. Cybersecurity (NIST, ISO 27001), Cloud, Data, AI is advantageous
  • Qualifications related to any of the above are advantageous (incl. CRISC, CRM, CRMP, FRM, CISM, CCSP, CGEIT, CIPM, CPA, ACCA, CIA, CISA)
• Strong stakeholder management skills
• Strongly process-, problem solving- and action-oriented
• Fully comfortable working in English, both written and spoken
• Experience with large e-commerce or tech companies is advantageous
• Project and/or Line management experience is advantageous

’s Total Rewards Philosophy is not only about compensation but also about benefits. We offer a competitive compensation and benefits package, as well  benefits which include:

• Annual paid time off and generous paid leave scheme including: parent, grandparent, bereavement, and care leave
• Hybrid working including flexible working arrangements, and up to 20 days per year working from abroad (home country)
• Industry leading product discounts - up to 1400 per year - for yourself, including automatic Genius Level 3 status and  wallet credit

Diversity, Equity & Inclusion have been a core part of our company culture since day one. This ongoing journey starts with our very own employees, who represent over 140 nationalities and a wide range of ethnic and social backgrounds, genders and sexual orientations.

Take it from our Chief People Officer, Paulo Pisano: “At , the diversity of our people doesn’t just build an outstanding workplace, it also creates a better and more inclusive travel experience for…