GRC Engineer - I
Booking.com · Bengaluru · 3–5 yrs experience · Posted 2026-07-24
Apply on the company site · Get a referral for this role
Booking.com salary & ratings · Booking.com interview process · More live openings
About the role
To help us accelerate on this journey, we are looking for an Engineering Manager to join our team. The GRC Principal Engineer provides technical leadership for the technology, data and automation that underpin governance, risk and compliance (GRC) capabilities, driving architectural direction, engineering standards and cross-functional execution.
You will provide technical mentorship, guidance and thought leadership across engineering teams, helping raise engineering quality, technical capability and delivery effectiveness in alignment with organizational objectives.
You should be a role model, technically strong to help your team develop and be able to be hands-on when needed. The GRC Senior Engineer drives the technical direction of critical engineering initiatives, ensuring solutions are scalable, reliable, secure and aligned with business objectives.. The role holder is required to analyze technology trends, human talent needs, and market demand to plan projects to ensure resilience in line with current demand and future ambition.
In addition to this, the role will confer with leaders, product, and key stakeholders to determine engineering feasibility, cost effectiveness, scalability, and time-to-market for new and existing products.
B. Responsible
1. GRC Technology Development
Develop and maintain GRC applications, integrations, and automation solutions.
Build and support integrations between GRC platforms and systems such as Jira, ServiceNow, identity platforms, and CI/CD tools.
Contribute to platform enhancements, bug fixes, and operational improvements.
Participate in design discussions and technical reviews.
2. Compliance & Control Automation
Implement automated controls and monitoring solutions under the guidance of senior engineers.
Develop scripts, APIs, and workflows to automate evidence collection and compliance reporting.
Support the implementation of policy-as-code and control-as-code capabilities.
3. Risk & Compliance Operations Support
Support risk assessment and control implementation activities with technical expertise.
Assist with control testing, evidence collection, and remediation tracking.
Maintain inventories of risks, controls, and technical assets.
Support audit activities by providing technical evidence and documentation
4. Engineering Excellence
Follow engineering standards, security requirements, and operational best practices.
Contribute to documentation, runbooks, and knowledge-sharing.
Participate in incident investigations and provide operational support as required.
5. Collaboration
Partner with engineers, product managers, risk specialists, and auditors.
Communicate technical concepts clearly to both technical and non-technical stakeholders.
Participate in team planning, Agile ceremonies, and engineering reviews.
B.Skilled
Level of Education:
Bachelor or Master’s degree in Information Technology, Computer Science, Engineering, Information Security, Business, or a related field. Relevant professional certifications (e.g. CISA, CISM, CISSP, CRISC, cloud certifications) are a plus.
Years of relevant Job Knowledge:
Broad Job Knowledge (3 - 5 years)
Responsibilities:
- for Central Tech and Security, Safety & Fraud (SS&F) are embedded in business teams and the Tech Risk Operations group.
- The GRC Engineering Manager leads a team of engineers responsible for building, operating and continuously improving the technology, data and automation that underpin our
- governance, risk and compliance (GRC)
- capabilities.
- The role will be key to defining the “next generation” SS&F and CT operational risk management practices using GenAI in the core, ensuring smart and pragmatic regulatory compliance and risk based decision making.
- To help us accelerate on this journey, we are looking for an Engineering Manager to join our team. The GRC Principal Engineer provides technical leadership for the technology, data and automation that underpin governance, risk and compliance (GRC) capabilities, driving architectural direction, engineering standards and cross-functional execution.
- You will provide technical mentorship, guidance and thought leadership across engineering teams, helping raise engineering quality, technical capability and delivery effectiveness in alignment with organizational objectives.
- You should be a role model, technically strong to help your team develop and be able to be hands-on when needed. The GRC Senior Engineer drives the technical direction of critical engineering initiatives, ensuring solutions are scalable, reliable, secure and aligned with business objectives.. The role holder is required to analyze technology trends, human talent needs, and market demand to plan projects to ensure resilience in line with current demand and future ambition.
- In addition to this, the role will confer with leaders, product, and key stakeholders to determine engineering feasibility, cost effectiveness, scalability, and time-to-market for new and existing products.
- B. Responsible
- 1. GRC Technology Development
- Develop and maintain GRC applications, integrations, and automation solutions.
- Build and support integrations between GRC platforms and systems such as Jira, ServiceNow, identity platforms, and CI/CD tools.
- Contribute to platform enhancements, bug fixes, and operational improvements.
- Participate in design discussions and technical reviews.
- 2. Compliance & Control Automation
- Implement automated controls and monitoring solutions under the guidance of senior engineers.
- Develop scripts, APIs, and workflows to automate evidence collection and compliance reporting.
- Support the implementation of policy-as-code and control-as-code capabilities.
- 3. Risk & Compliance Operations Support
- Support risk assessment and control implementation activities with technical expertise.
- Assist with control testing, evidence collection, and remediation tracking.
- Maintain inventories of risks, controls, and technical assets.
- Support audit activities by providing technical evidence and documentation
- 4. Engineering Excellence
- Follow engineering standards, security
Qualifications:
- 3-5 years of relevant experience in GRC, risk management, or software engineering.
- Proficiency in developing and maintaining GRC applications, integrations, and automation solutions.
- Technical expertise in scripting and API integration to build workflows (e.g., Jira, ServiceNow, CI/CD tools).
- Familiarity with policy-as-code and control-as-code methodologies and tools.
- Understanding of risk assessment frameworks and control testing procedure
- Experience providing technical evidence for audit activities and maintaining asset inventories.
- Commitment to engineering standards, security requirements, and operational best practices.
- Strong communication skills to translate technical requirements for cross-functional partners, including auditors and risk specialists.
- Ability to contribute effectively to technical documentation, runbooks, and knowledge-sharing.
- Active participation in Agile ceremonies and team planning activities.
Qualifications
- 3-5 years of relevant experience in GRC, risk management, or software engineering.
- Proficiency in developing and maintaining GRC applications, integrations, and automation solutions.
- Technical expertise in scripting and API integration to build workflows (e.g., Jira, ServiceNow, CI/CD tools).
- Familiarity with policy-as-code and control-as-code methodologies and tools.
- Understanding of risk assessment frameworks and control testing procedure
- Experience providing technical evidence for audit activities and maintaining asset inventories.
- Commitment to engineering standards, security requirements, and operational best practices.
- Strong communication skills to translate technical requirements for cross-functional partners, including auditors and risk specialists.
- Ability to contribute effectively to technical documentation, runbooks, and knowledge-sharing.
- Active participation in Agile ceremonies and team planning activities.
Responsibilities
- for Central Tech and Security, Safety & Fraud (SS&F) are embedded in business teams and the Tech Risk Operations group.
- The GRC Engineering Manager leads a team of engineers responsible for building, operating and continuously improving the technology, data and automation that underpin our governance, risk and compliance (GRC)
- capabilities.
- The role will be key to defining the “next generation” SS&F and CT operational risk management practices using GenAI in the core, ensuring smart and pragmatic regulatory compliance and risk based decision making.
- To help us accelerate on this journey, we are looking for an Engineering Manager to join our team.
- The GRC Principal Engineer provides technical leadership for the technology, data and automation that underpin governance, risk and compliance (GRC) capabilities
- driving architectural direction, engineering standards and cross-functional execution.
- You will provide technical mentorship, guidance and thought leadership across engineering teams, helping raise engineering quality, technical capability and delivery effectiveness in alignment with organizational objectives.
- You should be a role model, technically strong to help your team develop and be able to be hands-on when needed.
- The GRC Senior Engineer drives the technical direction of critical engineering initiatives, ensuring solutions are scalable, reliable, secure and aligned with business objectives..
- The role holder is required to
- analyze technology trends, human talent needs, and market demand to plan projects to ensure resilience in line with current demand and future ambition.
- In addition to this, the role will confer with leaders, product, and key stakeholders to determine engineering feasibility, cost effectiveness, scalability, and time-to-market for new and existing products.
- B. Responsible GRC Technology Development
- Develop and maintain GRC applications, integrations, and automation solutions.
- Build and support integrations between GRC platforms and systems such as Jira, ServiceNow, identity platforms, and CI/CD tools.
- Contribute to platform enhancements, bug fixes, and operational improvements.
- Participate in design discussions and technical reviews.
- Compliance & Control Automation
- Implement automated controls and monitoring solutions under the guidance of senior engineers.
- Develop scripts, APIs, and workflows to automate evidence collection and compliance reporting.
- Support the implementation of policy-as-code and control-as-code capabilities.
- Risk & Compliance Operations Support
- Support risk assessment and control implementation activities with technical expertise.
- Assist with control testing, evidence collection, and remediation tracking.
- Maintain inventories of risks, controls, and technical assets.
- Support audit activities by providing technical evidence and documentation Engineering Excellence
- Follow engineering standards, security