Job Properties
  • Job Type
    Full-time Position
  • Background
    Management & Business Others
  • Languages
  • Experience Required
    3 - 5 Years
  • Degree Required
    • Province
    • Date Posted
      November 27,2020
    • IMG_6430
    • IMG_6430
    • Career Consultation
    • CV CHECK
    • internship package
    • Premium Package

    Capability Area Lead - Incident Management

    Capability Area Lead - Incident Management

    It wasn’t so long ago that booking a trip to see the Eiffel Tower, stroll down New York’s iconic Madison Avenue or feel the sand between our toes on Copacabana Beach was simply a matter of a few taps on our smartphone. In fact, that’s what we do at We make it easier for everyone to experience the world. And while that world might feel a little farther away right now, we’re busy preparing for when the world is ready to travel once more.

    Across our offices worldwide, we continue to innovate. To solve for some of the most complex challenges in travel and technology, and to plan for the exciting developments that lie ahead. With strategic long-term investments into what we believe the future of travel can be, we are opening up new career opportunities that will have a strong impact on our mission. We are united in the belief that our very human desire to explore the planet’s beauty and discover more about other people and cultures will endure. The world is waiting for us. Together, we will be ready.

    Being one of the world's largest e-commerce websites in the world doesn’t happen on its own. In Central Tech, we focus on two primary areas: Customer Trust: Our Global Security team thinks about protecting our customer’s trust in us every day. Our Global Information Office ensures all the infrastructure and systems used to bring to you are scalable and operationally excellent. Our mission is to provide a trusted and always-available to the entire world.

    The Security Services team at protects from financial loss and brand damage by strategically securing channels; assets, customers, employees, partners, brand reputation, transaction, integrity, and infrastructure - through the use of world class technical capabilities that appropriately balance the management of risk with the impact to global business operations.

    Security Services is tasked with keeping Safe and Secure on many fronts. The core concepts of Prevention, Containment, Detection, and Remediation are applied to combat various forms of threats. Within the portfolio there are 5 capability areas - platform services, solutions architecture, capabilities center, threat management, and incident management.

    As Capability Lead, you will lead our strategic efforts to optimize our global security incident program. You will be responsible for the governance, coordination, communication, and reporting aspects of the security incident response process. You are expected to have a thorough understanding of the policy and regulatory requirements, including notification and escalation timelines, and the ability to translate these requirements into an effective and consistent department wide incident response handling process. The role will require you to act as a role model in times of elevated pressure, and is accountable for the management of the broader incident response program, spanning the planning, governance, design, rollout, and monitoring of the program to ensure the broader obligations are met effectively and consistently.

    A Capability Lead will keep up to date with the trends in the industry, applying and adapting best practices as needed to fulfill the role expectations. In addition to constant learning, the incident manager will also ensure that the incident response and coordination teams are well trained and drilled in the process, acting as a mentor and role model, and identifying gaps and training programs as needed.

    The Capability Lead will be in regular contact with senior leadership both within booking and the broader Booking Holdings organization, to ensure transparency and clarity of the current state of events, so the ability to communicate clearly and concisely, both in written and verbal form, is crucial to the role's success.


    Incident Management

    • Drive longer term strategic planning and vision for the security incident response program.
    • Mandates delivery of incident status reports for Head of Portfolio Areas, CSO/CISO, and other Executives.
    • Hands on crisis and/or incident management experience leading high impact global incidents with multiple stakeholders from across the business to contain, remediate, and inform prevention measures.
    • Facilitate onboarding and table top exercises to support continuous improvement and increase maturity level of IR capability.
    • Be connected with emerging threats, security flaws, and vulnerabilities
    • Establish protocols for communication within an organization and dealings with law enforcement during security incidents
    • Lead creation of appropriate processes are in place to ensure that the incident coordination is effective and in line with policy and regulatory requirements. Specifically, you will ensure that.

    Communication and Partnerships

    • Develop relationships with key security partners across and Booking Holdings companies to drive IR improvements.
    • Demonstrated ability to work effectively with cross functional groups including technology, data analytics, product, and program management.
    • Excellent verbal and written communication skills, polished interpersonal skills.
    • Ability to work with a broad and diverse range of stakeholders across the company from Central Tech, Commercial Operations, Legal, PR etc.
    • Identifies critical partners specific to more complex threats and escalations outside standard use cases, connects without direction or guidance and leads to a solution.
    • Knowledge and an ability to build networks across the industry (e-commerce platforms).

    Innovation and Excellence

    • Identifies opportunities to improve incident management processes.
    • Takes lead and hold capability areas accountable for improving incident management detection, response, and quality.
    • Technical advisor to help activate incident management task force with work across multiple teams and departments to implement improvement to organizational processes, automation, education and awareness, and reporting.
    • Identifies and develops reporting and data management needs to strategically support program and project management, training deployment etc.

    Leadership - technical / non-technical

    • Ability to direct and lead a team of technical analysts (2-3 FTE)
    • Demonstrates strategic mindset and ability to input into the 2-3 year roadmap for the functional area.
    • High level influence across the organization and ability to persuade LT on tactical response measures and gain agreement on way forward.
    • Leader within the Security organization and contributes to broader strategic projects to improve overall security posture.

    Vendor Management

    • Identifies opportunities to capture synergies on tactical response efforts and effectively manage vendors, training needs, projects, programs, initiatives, communications, and technical services.

    Program Management

    • Manages program schedules and budgets to ensure timely and cost-effective results.


    • 5+ years experience with incident management for technical and regulatory escalations - strategic, tactical and operations..
    • Demonstrated leadership skills under fast-paced, highly dynamic situations
    • Excellent written and verbal communication skills are required, including the ability to communicate technical concepts clearly and effectively.
    • Incident management skills: able to set priorities, pursue multiple threads at the same time, accurately reflect current state and drive towards desired state.
    • The ability to communicate confidently and clearly on conference calls, in meetings and via email, at all levels of the organisation is essential.
    • Thrives within a global inclusive working environment.
    • Knowledge of frameworks such as PCI, SOX, NIST, ITIL and GDPR is advantageous
    • This can be a stressful, pressure-packed job. We need you to be flexible, adaptable and down-to-earth and an expert in multi-tasking. Panickers and procrastinators need not apply
    • Bachelor’s degree in computer science or related field or equivalent experience


    We are a performance-based company that offers career advancement and lucrative compensation, including bonuses. We also offer what we call the “Booking Deal” with other competitive perks and benefits. This position is open to candidates globally. Visa sponsorship is available for this role. In the case of relocation, we will assist you with a generous relocation package, ensuring a smooth transition to working and living in Amsterdam.

    Open Positions from
    Related positions