Compliance London, United Kingdom

Risk Analyst

Company Intro

Booking Holdings (NASDAQ: BKNG) is the world leader in online travel and related services, provided to customers and partners in over 220 countries and territories through six primary consumer-facing brands –, KAYAK, priceline,,, and OpenTable. The mission of Booking Holdings is to make it easier for everyone to experience the world. 

Booking Holdings Financial Services UK (hereinafter “BHFS”) is based in London, UK and provides financial services in the form of payment services and e-money products across all the brands. BHFS is committed to conducting its business in compliance with applicable laws, regulations and guidelines, with integrity and to the highest ethical standards.

Job Summary

 We are seeking a Risk Analyst to support the BHFS Risk programme and help drive the advancement of BHFS’s risk and control architecture globally. The role holder will be responsible for helping execute our programme strategy and to embed a standardized and consistent approach to risk identification, governance, reporting and mitigation. The role holder will be an agile member of the wider BHFS Risk Team, who will help support key Risk workstreams.

The role sits in the BHFS UK Risk Team which is part of the Second Line of Defense (SLOD) and an independent function, charged with proactively challenging business and functional units in the first line of defense (FLOD) on their risk identification, assessment and mitigation strategies. The function is responsible for ongoing review and oversight of the control environment, which will entail scrutinizing processes, controls and remediation efforts to highlight gaps in risk mitigation.

The role holder will propel BHFS risk culture, inspire risk management behaviors and embolden optimal risk management practices by exhibiting support and partnership across the BHFS organization, and will embrace opportunities to collaborate with stakeholders at all levels across the wider Group.

The role holder will work across the Enterprise-wide risk taxonomy, with a focus on operational risks, which includes failures in the systems, equipment, people, and processes that support and enable BHFS to execute on its vision of evolving payment services. The role holder will effectively steward these risks by executing risk initiatives and reviews with a degree of rigor and independence. 

As the BHFS Risk Programme progresses to execution phase, the role holder will be expected to be an integral member of the team and assist across workstreams dedicated to Risk and Control Self-Assessments, Third Party Risk Management, Operational Resilience and Risk Reporting.

This role will be fully remote until the London office is fully open. Thereafter, the role is expected to be based on a hybrid flexible working model. 

Key Responsibilities

  • Stewarding the BHFS FLOD to ensure all relevant risks are identified and effectively managed by a robust control environment.

  • Contributing to the advancement and execution of BHFS Operational Risk activities and programs, such as RCSAs, Risk Event management and Committee reporting. 

  • Using metrics and testing to provide meaningful independent oversight and challenge to drive FLOD risk and control management.

  • Drive efforts to ensure capture of FLOD remediation plans, management of issues and timely reporting of threats.  

  • Facilitating Operational Resilience activities to ensure plans remain current, complete and aligned to regulatory expectations.

  • Contribute to Risk Reporting efforts to drive risk governance and Risk Committees.

  • Promoting and embedding a culture of risk management and mitigation across the organisation, by facilitating training, workshops and collaborative first line liaison.

  • Engage as a key partner to the BHFS business, functional units, Group stakeholders and the Internal Audit team on all relevant projects and topics.

  • Remaining current on business, industry and regulatory matters to identify new and emerging risks to which BHFS is exposed.

Knowledge and Skills

  • Undergraduate degree (required)

  • Post-graduate certification ideally in Risk, Audit, Finance or Law (preferable)

  • 2+ years experience within the function of an organisation dedicated to risk and control management, audit or risk consulting.

  • Experience liaising with stakeholders across the Three Lines of Defense on risk and control topics.

  • Demonstrable experience applying policies, procedures and standards.

  • An understanding of controls, controls testing, control attributes and ‘what good looks like’.

  • Experience using risk methodologies such risk rating or classification matrices.

  • Experience in business partnering, training and/ or workshop delivery to drive risk awareness and risk culture.

  • Basic understanding of Operational Resilience, Third Party Risk Management (TPRM) and Risk Event Management.

  • Experience using a GRC system.

  • Strong interpersonal skills and ability to collaborate with stakeholders.

  • Sharp presentational skills, able to transpose information into visually compelling formats. 

  • Succinct communicator who can break down complex issues and communicate confidently.

  • Ability to work in a cross-functional matrix environment.

  • Highly motivated and can work under pressure to meet deadlines and deliver results.

  • Ability to operate in an agile organisation, and demonstrate both flexibility and versatility.

  • Solution-driven, with excellent analytical and problem-solving skills.

  • Some limited travel may be required

Our Brands