Manager, IT Controls Assurance (COE India)

Booking.com · Bangalore

Source and collection record

Last observed by our collector: 9 October 2026 at 12:50 am IST. This is not a manual review or a confirmation from the employer.

Employer requisition: 30263

Job type and experience labels are automated discovery categories. The employer determines eligibility. Original experience wording was not retained separately; check the current employer page.

How sourcing and classification work · Report a discrepancy

Your application evidence checklist

Mark the statements you can support after reading the employer source. This checklist stays on this page; it does not score your eligibility or submit an application.

Attendance and availability: I checked the employer page for work location, office attendance, start date and duration.Current requisition: I checked the current employer requisition and its application requirements.

0 of 2 checks marked. Keep unresolved requirements as questions for the employer.

Collected role description

<h3 style="margin-top: 14pt; margin-bottom: 4pt;">Role Overview</h3>We are looking for an experienced Manager, IT Controls Assurance (COE India) to lead our IT SOX, ITGC and technology controls agenda within a Global Capability Centre (GCC) environment. The role requires a strong blend of technical expertise, risk and controls knowledge, audit experience and people leadership.The ideal candidate will be someone who can operate comfortably between technology teams, internal/external audit, Finance, Risk & Controls and senior leadership, while building and leading a high-performing controls team.<h3 style="margin-top: 14pt; margin-bottom: 4pt;">What You'll Do</h3><ul style="margin-top: 0px; margin-bottom: 0px; padding-inline-start: 48px;"><li style="font-size: 11pt; font-family: Arial, sans-serif;">The role leads IT assurance program delivery and review including risk assessment</li><li style="font-size: 11pt; font-family: Arial, sans-serif;">Provide leadership and oversight across IT General Controls, application controls and technology risk & compliance.</li><li style="font-size: 11pt; font-family: Arial, sans-serif;">Review of testing documentation, assurance scope beyond SOx, Testing automation and efficiency, and annual capacity estimation.</li><li style="font-size: 11pt; font-family: Arial, sans-serif;">Partner closely with Internal Audit, External Audit, Finance, Risk & Controls and Technology leadership to ensure effective control environments.</li><li style="font-size: 11pt; font-family: Arial, sans-serif;">Identify control gaps, drive remediation and ensure timely closure of audit findings.</li><li style="font-size: 11pt; font-family: Arial, sans-serif;">Provide technical guidance on ERP and enterprise technology environments, with strong understanding of platforms such as SAP and other large-scale business applications.</li><li style="font-size: 11pt; font-family: Arial, sans-serif;">Assess risks across areas such as access management, change management, IT operations, segregation of duties, system implementations and application controls.</li><li style="font-size: 11pt; font-family: Arial, sans-serif;">Lead and manage a team of controls/audit professionals, including coaching, capability building, performance management and succession planning.</li><li style="font-size: 11pt; font-family: Arial, sans-serif;">Build strong relationships with senior stakeholders and influence technology teams to embed controls into their day-to-day operations.</li><li style="font-size: 11pt; font-family: Arial, sans-serif;">Drive continuous improvement and automation of the SOX/control testing process.</li><li style="font-size: 11pt; font-family: Arial, sans-serif;">Support transformation initiatives, system implementations and changes in the technology landscape from a controls and compliance perspective.</li><li style="font-size: 11pt; font-family: Arial, sans-serif;">Provide clear, executive-level reporting on control health, key risks, audit observations and remediation progress.</li></ul><h3 style="margin-top: 14pt; margin-bottom: 4pt;">What We're Looking For</h3><ul style="margin-top: 0px; margin-bottom: 0px; padding-inline-start: 48px;"><li style="font-size: 11pt; font-family: Arial, sans-serif;">12+ years of overall experience in IT SOX, ITGC, Technology Risk, IT Audit, Controls or related areas with minimum 3 years of experience in people managment</li><li style="font-size: 11pt; font-family: Arial, sans-serif;">Strong hands-on expertise in ITGC, SOX compliance, IT audit and risk & controls.</li><li style="font-size: 11pt; font-family: Arial, sans-serif;">Experience managing SOX programs in a complex, global organization or GCC environment.</li><li style="font-size: 11pt; font-family: Arial, sans-serif;">Strong understanding of ERP environments, preferably SAP, and their associated IT/application controls.</li><li style="font-size: 11pt; font-family: Arial, sans-serif;">Experience with Cloud platforms, SaaS applications, and emerging technologies (AI/ML, RPA) is a plus</li><li style="font-size: 11pt; font-family: Arial, sans-serif;">Experience with in-house built software is a plus</li><li style="font-size: 11pt; font-family: Arial, sans-serif;">Experience working with Internal Audit, External Audit and senior business/technology stakeholders.</li><li style="font-size: 11pt; font-family: Arial, sans-serif;">Proven people management experience, with the ability to lead, develop and motivate a team.</li><li style="font-size: 11pt; font-family: Arial, sans-serif;">Strong understanding of IT processes including access controls, change management, IT operations, SDLC, cybersecurity controls and segregation of duties.</li><li style="font-size: 11pt; font-family: Arial, sans-serif;">Experience managing remediation of control deficiencies and audit findings.</li><li style="font-size: 11pt; font-family: Arial, sans-serif;">Strong analytical, problem-solving and stakeholder management skills.</li><li style="font-size: 11pt; font-family: Arial, sans-serif;">Ability to translate complex technology/control risks into clear business implications for senior leadership.</li></ul><h3 style="margin-top: 14pt; margin-bottom: 4pt;">Education & Preferred Background</h3><ul style="margin-top: 0px; margin-bottom: 0px; padding-inline-start: 48px;"><li style="font-size: 11pt; font-family: Arial, sans-serif;">Bachelor's degree in Engineering, Information Technology, Computer Science, Finance, Accounting or related discipline.</li><li style="font-size: 11pt; font-family: Arial, sans-serif;">CA / CPA / CISA / CRISC or other relevant professional qualification would be an advantage.</li><li style="font-size: 11pt; font-family: Arial, sans-serif;">Candidates with an Engineering or CA background would be preferred, particularly where combined with strong technology controls experience.</li><li style="font-size: 11pt; font-family: Arial, sans-serif;">Prior experience in a GCC / Global Shared Services / multinational environment is strongly preferred.</li></ul><h3 style="margin-top: 14pt; margin-bottom: 4pt;">The Ideal Candidate</h3>We're looking for a leader who is technically strong enough to challenge and guide Technology teams, controls-focused enough to stand up to Audit, and people-oriented enough to build and lead a strong team.Someone who can move beyond “testing controls” to actually influencing how technology risk and controls are managed across the organization. Pre-Employment Screening If your application is successful, your personal data may be used for a pre-employment screening check by a third party as permitted by applicable law. Depending on the vacancy and applicable law, a pre-employment screening may include employment history, education and other information (such as media information) that may be necessary for determining your qualifications and suitability for the position.

Collected experience requirement

3+ years