Role Overview

We are looking for an experienced Manager, IT Controls Assurance (COE India) to lead our IT SOX, ITGC and technology controls agenda within a Global Capability Centre (GCC) setting. The role requires a strong blend of technical expertise, risk and controls knowledge, audit experience and people leadership.

The ideal candidate will be someone who can operate comfortably between technology teams, internal/external audit, Finance, Risk & Controls and senior leadership, while building and leading a high-performing controls team.

What You'll Do

- The role leads IT assurance program delivery and review including risk assessment
- Provide leadership and oversight across IT General Controls, application controls and technology risk & compliance.
- Review of testing documentation, assurance scope beyond SOx, Testing automation and efficiency, and annual capacity estimation.
- Partner closely with Internal Audit, External Audit, Finance, Risk & Controls and Technology leadership to ensure effective control environments.
- Identify control gaps, drive remediation and ensure timely closure of audit findings.
- Provide technical guidance on ERP and enterprise technology environments, with strong understanding of platforms such as SAP and other large-scale business applications.
- Assess risks across areas such as access management, change management, IT operations, segregation of duties, system implementations and application controls.
- Lead and manage a team of controls/audit professionals, including coaching, capability building, performance management and succession planning.




- Build strong relationships with senior stakeholders and influence technology teams to embed controls into their day-to-day operations.
- Drive continuous improvement and automation of the SOX/control testing process.
- Support transformation initiatives, system implementations and changes in the technology landscape from a controls and compliance perspective.
- Provide clear, executive-level reporting on control health, key risks, audit observations and remediation progress.

What We're Looking For

- 12+ years of overall experience in IT SOX, ITGC, Technology Risk, IT Audit, Controls or related areas with minimum 3 years of experience in people managment
- Strong hands-on expertise in ITGC, SOX compliance, IT audit and risk & controls.
- Experience managing SOX programs in a complex, global organization or GCC environment.
- Strong understanding of ERP environments, preferably SAP, and their associated IT/application controls.
- Experience with Cloud platforms, SaaS applications, and emerging technologies (AI/ML, RPA) is a plus
- Experience with in-house built software is a plus
- Experience working with Internal Audit, External Audit and senior business/technology stakeholders.
- Proven people management experience, with the ability to lead, develop and motivate a team.
- Strong understanding of IT processes including access controls, change management, IT operations, SDLC,



cybersecurity controls and segregation of duties.
- Experience managing remediation of control deficiencies and audit findings.
- Strong analytical, problem-solving and stakeholder management skills.
- Ability to translate complex technology/control risks into clear business implications for senior leadership.

Education & Preferred Background

- Bachelor's degree in Engineering, Information Technology, Computer Science, Finance, Accounting or related discipline.
- CA / CPA / CISA / CRISC or other relevant professional qualification would be an advantage.
- Candidates with an Engineering or CA background would be preferred, particularly where combined with strong technology controls experience.
- Prior experience in a GCC / Global Shared Services / multinational environment is strongly preferred.

The Ideal Candidate

We're looking for a leader who is technically strong enough to challenge and guide Technology teams, controls-focused enough to stand up to Audit, and people-oriented enough to build and lead a strong team. Someone who can move beyond “testing controls” to actually influencing how technology risk and controls are managed across the organization. Pre-Employment Screening

If your application is successful, your personal data may be used for a pre-employment screening check by a third party as permitted by applicable law. Depending on the vacancy and applicable law, a pre-employment screening may include employment history, education and other information (such as media information) that may be necessary for determining your qualifications and suitability for the position.

📌 Manager, IT Controls Assurance (COE India) (Bengaluru)
🏢 Booking Holdings (NASDAQ: BKNG)
📍 Bengaluru