GRC Engineer - I

Role Description:

Company Introduction :

Booking Holdings (NASDAQ: BKNG) is the world leader in online travel and related services, provided to customers and partners in over 220 countries and territories through six primary consumer-facing brands - Booking.com, KAYAK, priceline, agoda.com, and OpenTable. The mission of Booking Holdings is to make it easier for everyone to experience the world.

Job Overview :

Booking Holdings India is a Center of Excellence (COE) based in Bangalore, India and was created to support the increasing business demands of Booking Holdings Inc. and its Brands. The COE is a key enabler of Booking Holdings Inc.’s global talent strategy for several technology functions such as Cybersecurity, Fraud monitoring/analytics, IT, and others across our Brand subsidiaries.

At Booking.com, data drives our decisions. Technology is at our core. And innovation is everywhere. But our company is more than datasets, lines of code or A/B tests. We’re the thrill of the first night in a new place. The excitement of the next morning. The friends you encounter. The journeys you take. The sights you see. And the memories you make. Through our products, partners and people, we make it easier for everyone to experience the world.

Booking.com follows a defence‑in‑depth strategy for managing its risks, with three lines of defence. Global Internal Audit (GIA) is responsible for the 3rd line, Risk & Controls (R&C) for the 2nd line, while the 1st line risk responsibilities for Central Tech and Security, Safety & Fraud (SS&F) are embedded in business teams and the Tech Risk Operations group.

The GRC Engineering Manager leads a team of engineers responsible for building, operating and continuously improving the technology, data and automation that underpin our governance, risk and compliance (GRC) capabilities.

The role will be key to defining the “next generation” SS&F and CT operational risk management practices using GenAI in the core, ensuring smart and pragmatic regulatory compliance and risk based decision making.

About the Role

To help us accelerate on this journey, we are looking for an Engineering Manager to join our team. The GRC Principal Engineer provides technical leadership for the technology, data and automation that underpin governance, risk and compliance (GRC) capabilities, driving architectural direction, engineering standards and cross-functional execution.

You will provide technical mentorship, guidance and thought leadership across engineering teams, helping raise engineering quality, technical capability and delivery effectiveness in alignment with organizational objectives.

You should be a role model, technically strong to help your team develop and be able to be hands-on when needed. The GRC Senior Engineer drives the technical direction of critical engineering initiatives, ensuring solutions are scalable, reliable, secure and aligned with business objectives.. The role holder is required to analyze technology trends, human talent needs, and market demand to plan projects to ensure resilience in line with current demand and future ambition.

In addition to this, the role will confer with leaders, product, and key stakeholders to determine engineering feasibility, cost effectiveness, scalability, and time-to-market for new and existing products.

B. Responsible

1. GRC Technology Development

Develop and maintain GRC applications, integrations, and automation solutions.

Build and support integrations between GRC platforms and systems such as Jira, ServiceNow, identity platforms, and CI/CD tools.

Contribute to platform enhancements, bug fixes, and operational improvements.

Participate in design discussions and technical reviews.

2. Compliance & Control Automation

Implement automated controls and monitoring solutions under the guidance of senior engineers.

Develop scripts, APIs, and workflows to automate evidence collection and compliance reporting.

Support the implementation of policy-as-code and control-as-code capabilities.

3. Risk & Compliance Operations Support

Support risk assessment and control implementation activities with technical expertise.

Assist with control testing, evidence collection, and remediation tracking.

Maintain inventories of risks, controls, and technical assets.

Support audit activities by providing technical evidence and documentation

4. Engineering Excellence

Follow engineering standards, security requirements, and operational best practices.

Contribute to documentation, runbooks, and knowledge-sharing.

Participate in incident investigations and provide operational support as required.

5. Collaboration

Partner with engineers, product managers, risk specialists, and auditors.

Communicate technical concepts clearly to both technical and non-technical stakeholders.

Participate in team planning, Agile ceremonies, and engineering reviews.

B.Skilled

Level of Education : Bachelor or Master’s degree in Information Technology, Computer Science, Engineering, Information Security, Business, or a related field. Relevant professional certifications (e.g. CISA, CISM, CISSP, CRISC, cloud certifications) are a plus.

Years of relevant Job Knowledge : Broad Job Knowledge (3 - 5 years)

Requirements of special knowledge/skills

3-5 years of relevant experience in GRC, risk management, or software engineering.

Proficiency in developing and maintaining GRC applications, integrations, and automation solutions.

Technical expertise in scripting and API integration to build workflows (e.g., Jira, ServiceNow, CI/CD tools).

Familiarity with policy-as-code and control-as-code methodologies and tools.

Understanding of risk assessment frameworks and control testing procedure

Experience providing technical evidence for audit activities and maintaining asset inventories.

Commitment to engineering standards, security requirements, and operational best practices.

Strong communication skills to translate technical requirements for cross-functional partners, including auditors and risk specialists.

- Ability to contribute effectively to technical documentation, runbooks, and knowledge-sharing.- Active participation in Agile ceremonies and team planning activities.

Pre-Employment Screening

If your application is successful, your personal data may be used for a pre-employment screening check by a third party as permitted by applicable law. Depending on the vacancy and applicable law, a pre-employment screening may include employment history, education and other information (such as media information) that may be necessary for determining your qualifications and suitability for the position.