Senior Legal Counsel - Cyber

As Senior Legal Counsel - Cyber, you help shape Booking.com's cybersecurity and privacy roadmap within a fast-paced tech and travel environment. You work closely with business teams to identify legal risks, support incident response, and ensure regulatory compliance across GDPR and global privacy regimes. Your role combines hands-on legal advice with strategic collaboration to protect personal data and enable scalable, compliant growth.

• hybrid working
• up to 20 days per year working from abroad
• industry-leading product discounts
• inclusive culture and diversity
• competitive compensation and benefits package
• Total Rewards Philosophy

• Partner on cybersecurity incident management and improve incident response processes
• Advise on regulatory compliance related to cybersecurity and privacy, and interface with authorities and law enforcement
• Prioritize and drive progress in a fast-paced environment with clear, structured guidance
• Support implementation of cybersecurity frameworks and policies with practical risk-based legal advice
• Mentor and develop junior lawyers and peers within a high-performing team
• Collaborate with Legal, Data Protection Officer, Cybersecurity, Risk & Compliance, Procurement, and external counsel to manage legal risks
• Provide legal guidance on security, cybercrime, and FinTech privacy; support third-party risk assessments and data processing agreements in contracts
• Contribute to building scalable, efficient ways of working to support sustainable business growth

• EU, UK or US law degree
• At least 5 years’ experience in law (firm or in-house) with hands-on cybersecurity and data security compliance
• Knowledge of cyber-risk and enterprise technology; strong GDPR understanding
• Native or fluent English; Dutch a plus
• Excellent written and oral communication; strong attention to detail

• strong communication (written and oral)
• attention to detail
• organizational and project management skills
• expertise in cybersecurity laws and data security compliance
• understanding of GDPR and technology/security developments
• experience with data protection issues in contracts and FinTech privacy