About FareHarbor
At FareHarbor, our mission is to make experiences better for everyone. Founded in 2013 in Hawaii and acquired by Booking Holdings in 2018, FareHarbor creates powerful tools that enable our clients (think boat rentals, museums, food tours, events and more!) to operate and grow.With over 20,000 clients across 90+ countries—we’re the largest in our industry and shaping the future of travel, together.Our team is an ‘Ohana of 700+ people around the world. We’re passionate about pioneering an industry, embracing challenges with open arms, and delivering value to the experiences industry.
FareHarbor Core Values:
- Think Client First
- We Are One ‘Ohana
- Be Curious and Learn
- Own It.
- Act With Integrity
- Embrace the Challenge
Why FareHarbor?
Founding FareHarbor required unwavering passion. Turning a start-up into the world’s leading and largest reservation software for tours, activities, and attractions required relentless dedication and vision. To date, we’ve helped over 20,000 global businesses operate successfully and are proud to have played a role in enabling business owners to live their dreams.And since day one, we’ve known that our real success lies in our people—the Ohana.With each new feature launched and new client onboarded, there is a team of incredible people behind the scenes who are full of dedication, passion, energy, and the will to succeed.
We encourage everyone to bring their whole selves to work—to believe in their abilities, to freely express their creativity, and to contribute with their own uniqueness by wearing their true colors. We take care of one another and always prioritize health and wellbeing. We give our people the space and trust to learn, to try, to succeed, to collaborate, to think outside of the box, to make mistakes, and even to fail. And then we come together to try again.From the minute you join, you have a voice. You find your space. You make an impact. We celebrate our victories, shout our successes, and are always eager to tackle new challenges. And we can’t wait to see all that’s to come.
About the Role
FareHarbor is looking for a full time IT Risk & Control Officer that will be responsible for the area of policy, compliance and risk management.The IT Risk & Control officer is responsible for partnering with risk, process and control owners throughout FareHarbor to design and maintain internal controls in line with our risk appetite and to maintain the quality of our processes. The role requires to work closely with stakeholders from multiple departments and to have a strong big picture focus, but be able to zoom in and out of the details to ensure a full process understanding. This is a subject matter expert role, leveraging deep expertise of IT, security and enterprise risk management discipline.
The role requires excellent stakeholder management skills, and being comfortable with advising and challenging senior business owners to come up with robust, scalable solutions which mitigate key risks while enabling successful business operations.
What you’ll do here:
- Serve as a first line of defense risk management point of contact, supporting product, process and control owners throughout the risk management cycle identifying, assessing, managing, monitoring, and reporting risks
- Maintain FareHarbor information security policy, guidance, guidelines and IT control framework
- Perform gap analysis to evaluate the effectiveness and compliance of operational processes with our corporate security policies and guidelines; and provide recommendations to identify areas for improvement, with proposed remediation
- Support the business to understand the risks and requirements spanning SOx, Security, GDPR, business continuity, PCI-DSS etc. and assist them in determining optimal controls to mitigate risks in the environment
- Provide guidance and support FareHarbor teams in designing and implementing appropriate controls to mitigate company risks and ensure compliance with SOx, NIST, GDPR, PCI-DSS and other regulatory requirements and control frameworks.
- Conduct and oversee the completion of risk assessments for FareHarbor products, systems and processes, to ensure compliance with policies, procedures, contractual and regulatory requirements
- Support Legal and Sales department, as the Information Security contact, answering client’s security questions and requirements
- Support the third party risk management process
- Collaborate with internal and/or external audit, coordinating and supporting the business in preparing for and undergoing IT audits (e.g. SOx and operational internal audits), remediating and mitigating deficiencies
- Assist in the development and leading of regular training / awareness programs to train and educate business stakeholders on risk & control topics
- Build strong relationships with business leadership, 2nd Line Risk & Control team, internal audit, external audit and external partners, driving successful outcomes in risk management activities and maturing the risk governance across the organization
- Support ongoing maintenance and continuous improvement of the control environment and risk posture of FareHarbor
Requirements:
Technical skills:
- The ideal candidate will have a strong background in IT Risk Management, IT Frameworks, Governance and Controls, combined with an understanding of technology-based product development, DevOps processes and cybersecurity
- 5+ years of experience gained within security, risk management, internal controls or audit
- Knowledge of industry best practices from organizations such as International Standards Organization (ISO), Center for Internet Security (CIS) and National Institute of Standards (NIST)
- Experience in IT audits and IT risk assessments
- Experience assessing internal control design and operating effectiveness
- Familiarity with applicable IT frameworks (COBIT, ITIL, NIST, ISO 27001, 20000, 22301, etc)
- Familiarity with designing controls for Cloud platforms is a big plus, especially AWS
- IT degree / certificates (CISA, CISM, CISSP, CRISC, etc.)
Soft Skills:
- Able to prepare concise reports for senior management
- Strong stakeholder engagement skills
- Demonstrates the ability to make decisions, assess and resolve problems effectively
- Enthusiastic, self-starting and thrives in changing, agile environments
- Fluent in English, both written and spoken
Benefits
- Global leave benefit
- 22 weeks paid parental leave
- 2 weeks paid grandparent leave
- Extended care and bereavement leave
- Life insurance policy
- Pension Plan
- Central Amsterdam Location
- Discount CZ insurance
- Working in a multicultural environment - 45 different nationalities
- Commuting allowance for public transport & subsidized lunch
- Wellness benefits (Headspace subscription & wellness webinars)
- Hybrid friendly
- Work-from-home assistance
- Educational Opportunities
- Social hours & events and team-building
- 26 vacation days per year
FareHarbor is committed to creating a diverse environment, and we are an equal opportunity employer. We do not discriminate on the basis of race, color, religion, gender, gender identity, sexual orientation, national origin, disability, age, or veteran status. We welcome talent that can offer us new insights and perspectives on challenges that we face, and we take measures to eliminate unconscious bias throughout the interview and hiring process. In tandem, we work to cultivate an inclusive culture in which all of our employees can be their authentic selves.To learn more about how we use your information, see our Privacy Statement for Applicants.
By submitting your application, you confirm that you understand and agree that your information will be processed in accordance with our Privacy Statement for Applicants.Any offer of work (e.g. employment, assignment) will be subjected to the successful completion of pre-employment screening.
