Booking Holdings Seeks Director of Risk & Controls

The 2024 Director of Risk & Controls vacancy should not be shown as open today. Booking Holdings’ official careers page now lists roles across group functions and routes candidates to current requisitions; individual brands also recruit separately. Risk candidates should verify the legal employer, group or brand, location, level, work arrangement and job ID, then map their evidence to the exact control environment. The rebuild should cover enterprise risk, financial crime, compliance, audit, technology risk, privacy, payments and governance without implying that one former director role is still available.

What to verify

• Confirm whether the role is employed by Booking Holdings, a centre of excellence or a brand such as Booking.com; the requisition controls.
• Risk families can include financial crime, enterprise, payments, compliance, cyber, privacy, internal controls, audit and legal.
• Senior candidates should show risk assessment, control design, testing, remediation, governance reporting and stakeholder challenge with measurable scope.
• Regulated payments or financial-crime roles may require jurisdiction-specific knowledge; do not generalize one listing worldwide.
• Use annual reports and governance documents to understand disclosed risks, not to claim confidential internal priorities.
• Booking Holdings states it will not request candidate payments or credit-card information during hiring.

Maintain a claim table containing the official source, source date, access date, exact requirement, applicant evidence and unresolved question. If a critical condition is missing, label it unknown rather than guessing from an earlier article.

Application or implementation steps

1. Search the official group careers page and relevant brand sites for an active requisition.
2. Record employer, job ID, location, level, arrangement and reporting context.
3. Build examples covering risk identification, control design, testing, remediation and executive communication.
4. Tailor the CV and prepare a concise view of the business and disclosed risks using primary filings.
5. Apply officially and verify recruiter messages using the requisition and company process.

Record the source URL, requisition or specification version, date, evidence used and next decision. For applications, preserve the submitted materials. For technical implementation, preserve architecture decisions, tests and risk acceptance. Recheck the controlling source before payment, interview, deployment, travel or sensitive-data disclosure.

Skills and evidence

Convert every important criterion into proof: context, action personally taken, tool or standard, and measurable result. Verify organizations, credentials, licence or specification versions. Regulated roles need evidence of accuracy, privacy, escalation and auditability. Technical claims need a reproducible example, threat model or test rather than slogans.

Put the most relevant proof first. Use source terminology naturally without copying. State boundaries and missing evidence. A global organization, digital product or online process does not automatically mean worldwide remote access, interoperability, sponsorship or universal legal rights.

Safety and verification

Navigate from a known primary domain and compare entity, title, ID, version, location and contact with any secondary claim. Shortened links, screenshots and social messages are discovery signals, not controlling evidence.

For jobs, reject personal payment, guaranteed selection, chat-only interviews, one-time-code requests and unexplained identity collection. For blockchain, treat wallet signatures as potentially consequential, verify contract address and network, use test environments, minimize approvals and never share a seed phrase. In both cases, independent verification comes before irreversible action.

Engagement checklist

• I identified the precise entity, role, programme or technical problem.
• I found a current primary or explicitly authorized source.
• I recorded status, version, location and date.
• I checked essential requirements and risks against evidence.
• I can explain what this opportunity or technology does not guarantee.
• I preserved the materials or decisions needed for review.

If two boxes remain empty, pause. Track checklist and primary-source clicks after analytics instrumentation is available.

Primary and official sources

• https://www.bookingholdings.com/careers/careers/
• https://jobs.booking.com/bookingholdings-coe-privacy-cookies/jobs/29466?lang=en-us
• https://ir.bookingholdings.com/financials/annual-reports/default.aspx?LanguageId=1
• https://ir.bookingholdings.com/governance/governance-documents/default.aspx?LanguageId=1
• https://www.sec.gov/Archives/edgar/data/1075531/000130817926000312/bkng015295_ars.pdf

These are source routes, not blanket validation of every historical claim. Editors must reopen them on publication day, record access dates and cite the most specific live page or specification.

FAQ

Is the old Director of Risk & Controls role open?

Only a current official requisition establishes availability.

Should I apply at group or brand level?

Follow the legal employer and application route in the listing.

What evidence matters for senior controls roles?

Scope, risk judgment, control design, testing, remediation and governance outcomes.

Does Booking Holdings charge candidates?

Its careers page says it does not request payment or credit-card data during hiring.

Application guidance: put this owner into practice

How to apply the guidance in Booking Holdings risk and controls careers: current-role guide: first identify the exact role, employer, programme, skill, or decision described in the owner and turn its requirements into a short evidence checklist. For a live opportunity, verify the current opening, location, work arrangement, eligibility, closing date, and application process on the official source before submitting anything. Prepare a tailored resume or portfolio example for each verified requirement, record the source URL and access date, and never pay an application fee or share sensitive financial credentials. For an evergreen informational owner, test the recommended method on one realistic scenario, note the result, and revise the checklist before expanding it. This keeps the page practical without inventing demand, availability, salary, or engagement data.