Manager, IT Risk & Controls (Hybrid)

Location: Toronto, Canada (Hybrid Position, in office 2 days per week) With millions of diners, 60,000+ restaurant partners and 25+ years of experience, OpenTable, part of Booking Holdings, Inc. (NASDAQ: BKNG), is an industry leader with a passion for helping restaurants thrive. Our world-class technology empowers restaurants to focus on what matters most – their team, their guests, and their bottom line – while enabling diners to discover and book the perfect restaurant for every occasion. Every employee at OpenTable has a tangible impact on what we do and how we do it. You’ll also be part of a global team and its portfolio of metasearch brands. Hospitality is all about taking care of others, and it defines our culture. The Role: OpenTable's Finance team is looking for a Manager, IT Risk and Controls! The Manager, IT Risk & Controls is a leadership role responsible for overseeing the design, implementation, and ongoing monitoring of IT risk management and control activities. The purpose is to ensure OpenTable’s systems, processes, and data are secure, compliant with regulatory and corporate requirements, and supportive of the company’s strategic objectives. This leader acts as a subject matter expert on IT controls, collaborates with internal teams (such as Technology Operations, Security, and Finance), and partners with internal and external auditors. In this role, you will: IT Risk Management and Assessment Identify, evaluate, and prioritize IT risks across OpenTable’s operations. Oversee regular risk assessments and control certification/validation activities. Monitor emerging IT risks and propose mitigation strategies. Controls Design and Effectiveness Lead the design and implementation of internal controls over technology systems and processes, particularly those supporting financial reporting (e.g., SOX compliance). Guide teams in the execution of user access reviews, segregation of duties monitoring, change management controls, and other standard IT controls. Maintain documentation of controls, processes, and evidence required for internal and external audits. Controls Certification and Audit Support Manage quarterly and annual control certification and user access review cycles. Serve as a liaison between IT, the Finance organization, and external auditors. Support ITGC (IT General Controls) management testing. Remediation and Process Improvement Investigate any identified control deficiencies, oversee remediation efforts, and work to strengthen and automate internal controls as appropriate. Continuously improve risk management processes using technology, analytics, and cross-functional input. Stakeholder Engagement Partner with cross-functional leaders at OpenTable, supporting business objectives while ensuring a risk-aware culture. Present risk and control status updates to senior leadership as needed. Policy, Governance & Program Management Develop and maintain IT risk management policies, control standards, and governance frameworks. Ensure alignment with Booking Holdings (BKNG) group policies and broader compliance requirements. Please apply if you have: Bachelor’s degree (or above) in IT, Engineering, or Accounting/Finance. 7+ years of progressive experience coordinating IT SOX compliance activities and maintaining IT Risk and Control Matrices/Frameworks. Leadership experience in IT risk management, audit, compliance, or a related field. Deep knowledge of internal controls over financial reporting, information security, and regulatory standards (e.g., SOX, COSO, COBIT, NIST). Strong analytical, communication, and stakeholder management skills. Experience working with auditors and managing audit processes. Ability to collaborate with both technical and non-technical stakeholders. Professional certifications (such as CISA, CISSP, CRISC, CIA, or similar) preferred. Experience in Big 4 Accounting/Professional Services is preferred. Benefits and Perks Work from (almost) anywhere for up to 20 days per year Focus on mental health and well-being: Company-paid therapy sessions through SpringHealth Company-paid subscription to Headspace Annual company-wide week off a year - the whole team fully recharges (and returns without a pile-up of work!) Paid parental leave Generous paid vacation + time off for your birthday Paid volunteer time Focus on your career growth: Development Dollars Leadership development Access to thousands of on-demand e-learnings Travel Discounts Employee Resource Groups 20 days of paid time off Private health and dental insurance Life and Disability insurance The best connections happen face-to-face, whether you’re sitting down to dinner or having coffee with a coworker. That’s why OpenTable has adopted a hybrid workplace model. This role aligns with that approach, with an expectation of coming into the office two days a week—giving employees the best of both worlds: in-person collaboration and flexibility. The expected range of compensation for this position based in Toronto, Canada, is $120,000-$135,000 CAD. There are a variety of factors that go into determining a compensation range, including but not limited to external market benchmark data, geographic location, and years of experience sought/required. We offer a competitive base salary and benefits including: health benefits; flexible spending account; retirement benefits; life insurance; paid time off (including PTO, paid sick leave, medical leave, bereavement leave, floating holidays and paid holidays); and parental leave benefits. This role is eligible to be considered for an annual bonus. Work Environment & Flexibility At OpenTable, we pride ourselves on fostering a global and dynamic work environment. As a team member with us, you will benefit from a schedule tailored to accommodate a global workforce operating across multiple time zones. While the majority of your responsibilities may align with conventional business hours, there will be instances where you are expected to manage communications - via calls, Slack messages, or emails - outside of regular working hours to effectively collaborate with international colleagues, respond to restaurant partners, and/or address urgent matters. OpenTable will always abide by and consider local laws and regulations. Inclusion We’re committed to creating a workplace where everyone feels they belong and can thrive. We know the best ideas come when we bring different voices to the table, so we're building a team as dynamic as the diners and restaurants we serve—and fostering a culture where everyone feels welcome to be themselves. If you need accommodations during the application or interview process, or on the job, we’re here to support you. Please reach out to your recruiter to request any accommodations. #LI-BR1

Oversee the design, implementation, and monitoring of IT risk management and control activities to ensure system security and regulatory compliance. Act as a subject matter expert collaborating with technology, security, and finance teams to manage audits and remediate control deficiencies.

Requires a Bachelor's degree in IT, Engineering, or Finance with over 7 years of experience in IT SOX compliance and risk frameworks. Professional certifications like CISA or CISSP and experience in Big 4 accounting are preferred.

• Work from anywhere up to 20 days per year • Company-paid therapy sessions • Headspace subscription • Annual company-wide week off • Paid parental leave • Paid vacation • Birthday time off • Paid volunteer time • Development Dollars • Leadership development • On-demand e-learnings • Travel Discounts • Employee Resource Groups • Private health and dental insurance • Life and Disability insurance • Flexible spending account • Retirement benefits

Relevées dans la description du poste. Confirmez les exigences importantes ci-dessus.

• IT Risk Management
• SOX Compliance
• Internal Controls
• ITGC Testing
• Risk Assessment
• Stakeholder Management
• Audit Coordination
• Governance Frameworks
• Control Certification
• Remediation Planning
• COSO
• COBIT
• NIST
• Analytical Skills
• Communication Skills
• Financial Reporting

• Finance & Accounting
• Technology
• Management & Leadership
• Security & Safety
• Consulting

Formation minimale

Diplôme professionnel

Expérience minimale

25+ ans

Langue de l’offre

anglais

Heures de travail

40 heures par semaine

Présence au bureau

2 jours par semaine