[25/09/2025] R&C ITAC SOX Analyst

Role Description:

About Us

Booking Holdings India is a Center of Excellence based in Bangalore, India and was created to support the increasing business demands of the Booking Holdings Brands. The Center of Excellence provides access to specialized and highly skilled talent, leading industry best practices, and collaboration opportunities across all of our Brands.

As part of our Booking Holdings India team, you will have the opportunity to be a part of the world’s leading provider of online travel, with a mission of making it easier for everyone to experience the world through six-primary consumer facing brands: Booking.com, Priceline, Agoda, KAYAK, OpenTable and Rentalcars.com.

About the Role

We are now looking for an Analyst, Internal Controls & Assurance (IC&A) in our CoE to support IT SOx testing covering IT General Controls (ITGC), IT Application controls (ITAC) and IT Dependent Manual Controls (ITDM).

The IC&A IT SOx Analyst is a subject matter expert, responsible for advising the risk team on controls design, deficiencies evaluation and improvements across multiple processes from SOx testing standpoint.

A successful risk professional requires a dynamic personality and ability to adapt in a rapidly changing environment.

B. responsible: key areas of responsibility will include, but are not limited to:

- Support testing end to end:

- Design and execute the day-to-day testing activities of IT controls (including ITGCs, interface controls, ITACs, and ITDMs), with a focus on regulatory/compliance (SOX) related risks

- Collect, analyze, and interpret information to assess and conclude on each assigned testing area with clear concise documentation

- Identify gaps in design and execution, and communicate issues and recommendations to R&C team and control owners

- Develop and maintain comprehensive documentation including process walkthrough documentation, control testing documentation and any others required

- Collaborate and partner with R&C by providing guidance and ensuring that critical SOx controls are adequately designed and documented, in order to strengthen the control environment, mitigate the company risks and support the business in achieving objectives

- Collaborate & participate within R&C to continuously improve the R&C’s capabilities and governance from SOX testing standpoint

B. skilled:

- The ideal candidate will have a strong background in IT risk management, IT frameworks, governance and controls, Segregation of Duties, Cloud audits and ERP audits.

- 4+ years of experience gained within IT compliance, internal controls, internal/external audit, including experience working with teams in an international environment

- Strong understanding of design assessment and operating effectiveness assessment of IT controls, and interface controls.

- Experience in performing audits in DevOps environments, SOA and microservices driven architectures, and cloud security is an added advantage.

- Experience in performing source code review is an added advantage.

- Understanding of IT frameworks such COSO and COBIT

- Strong working knowledge of SOX

- Ability to multitask and successfully manage multiple priorities and projects

- Strong work ethic, enthusiastic, self-starting, adaptable and enjoys change in a super engaged team

- Able to work independently & autonomously, while still being a strong team player

- Fully comfortable working in English, both written and spoken

- Professional certification, such as CISA/CRISC/CISSP (or similar), would be an advantage

- Relevant Bachelor’s degree required