Senior Technical Risk & Compliance Analyst

LinkedIn • Mountain View, CA

6d • $143,000 - $218,000 • Hybrid

About The Position

LinkedIn’s Governance, Risk, Automation, Compliance & Engineering (GRACE) team works across Security, Engineering, Legal, Privacy, Audit, and other groups to turn risk and compliance requirements into scalable controls. The Senior Technical Risk & Compliance Engineer supports the end-to-end GRACE lifecycle, with a focus on Sarbanes-Oxley (SOX) compliance. The role independently owns emerging technology and system-related risks that could affect financial reporting, from onboarding and risk assessment through control design, implementation partnership, assurance, continuous monitoring, and improvement.

The role partners closely with Finance and Engineering to translate SOX, financial reporting, and assurance requirements into actionable technical controls; evaluate how controls are implemented in systems supporting financial reporting; identify and drive remediation of gaps; and establish ongoing visibility into control health and effectiveness. The successful candidate combines technical depth with compliance expertise, understanding financial reporting systems and technical architectures, analyzing data and technical artifacts, and translating compliance requirements into practical, scalable solutions.

The position may cover technical risk and SOX compliance across identity and access management, code review and custom systems, segregation of duties, IT change management and operations, IT automated controls, data integrity and interfaces, cloud and infrastructure controls, third-party controls, system implementations, and emerging technologies. The role is hybrid, performed from home and a LinkedIn office on select days according to business needs. LinkedIn lists a pay range of $143,000 to $218,000; compensation depends on factors including skills, experience, certifications, and work location. Total compensation may also include an annual performance bonus, stock, benefits, and/or other incentive compensation.

Requirements

• BA/BS degree in Computer Science, Engineering, Information Systems, Accounting, or a related discipline, or equivalent practical experience.
• 7+ years of experience in Technical SOX compliance, IT risk and controls, technology compliance, technical audit/assurance, or a related field.
• Experience assessing technology and system-related risks that could affect financial reporting and contribute to material misstatements.
• Experience evaluating the design and implementation of ITGCs and ITACs, identifying control gaps, and assessing the impact of system and technology changes.
• Experience analyzing technical artifacts such as system designs, configurations, logs, data, scripts, queries, or code to understand and evaluate control implementation.
• Experience partnering with Finance, Engineering, or Security teams on technical SOX risk and compliance requirements.
• Ability to independently manage assigned compliance areas, prioritize competing requirements, and clearly communicate technology risks, control deficiencies, and remediation recommendations.

Nice To Haves

• Experience across Technical SOX domains such as Identity and Access Management, IT Change Management, IT Operations, Segregation of Duties, Automated Application Controls, and Data Integrity.
• Strong understanding of SOX compliance, Internal Controls over Financial Reporting (ICFR), COSO principles, and applying ITGCs and ITACs to financial reporting risks.
• Experience assessing technology risks and controls across large-scale distributed systems, cloud infrastructure, enterprise applications, or modern software development environments.
• Experience evaluating system architecture, application configurations, code, data flows, and system integrations to assess technical control design and effectiveness.
• Experience using data, telemetry, dashboards, scripts, and automated workflows to evaluate SOX control effectiveness and identify exceptions.
• Experience designing or supporting continuous controls monitoring, automated evidence collection, or SOX compliance automation.
• Experience with GRC systems, SOX risk and control matrices, control inventories, evidence pipelines, and compliance systems of record.
• Experience supporting SOX readiness assessments, internal and external audits, control deficiency evaluations, or remediation activities.
• Ability to identify systemic patterns across technology risks, control deficiencies, and audit findings and translate them into scalable control design and process improvements.
• Relevant professional certifications such as CISA, CISSP, CRISC, or equivalent.
• Proficiency in SQL and experience with relational databases such as MySQL, Oracle, PostgreSQL, or Microsoft SQL Server.
• Working knowledge of AWS, Azure, or GCP and infrastructure technologies such as Kubernetes, Docker, Linux, and Terraform.
• Ability to read and analyze code, scripts, and queries using Python, Java, Bash, PowerShell, or SQL.
• Experience evaluating access controls, permissions, privileged access, and role-based access models across Active Directory, Microsoft Entra ID, Okta, and cloud IAM services.
• Familiarity with Git, GitHub, Jenkins, GitLab, CI/CD pipelines, and modern software development practices.
• Understanding of enterprise financial systems such as SAP, Oracle ERP, or Workday, including APIs, data interfaces, and automated application controls.
• Experience analyzing system logs, configurations, and monitoring data using tools such as Splunk, Datadog, or CloudWatch.
• Ability to assess system architectures, database configurations, application logic, and infrastructure changes to identify SOX-relevant risks, validate control design, and recommend scalable control solutions.

Responsibilities

• Independently drive assigned Technical SOX areas through the GRACE lifecycle, from onboarding and risk assessment through continuous monitoring and improvement.
• Assess technology and system-related risks that could cause material misstatements in financial statements and evaluate their financial reporting impact.
• Assess IT General Controls (ITGCs) and IT Automated Controls (ITACs), including the effects of proposed system, technology, and process changes.
• Evaluate SOX requirements, financially relevant systems, and technology dependencies to establish control objectives and coverage and identify compliance gaps.
• Maintain risk-to-control mappings, SOX system scoping, accountable ownership, and supporting documentation in compliance systems of record.
• Partner with Finance, Security, and Engineering to translate SOX requirements and risks into practical, testable technical controls in systems and engineering workflows.
• Evaluate system and technology changes and recommend efficient, scalable control designs that mitigate risks while avoiding unnecessary complexity and redundancy.
• Assess system architecture, data flows, configurations, access models, logs, scripts, queries, code, and other technical artifacts to validate control design and implementation.
• Review existing controls, recommend improvements, and identify opportunities to embed and automate controls across applications, platforms, infrastructure, and engineering workflows.
• Ensure controls have clear ownership, expected evidence, testable criteria, and monitoring requirements.
• Translate SOX control design and effectiveness criteria into measurable monitoring requirements.
• Use system-generated data, dashboards, telemetry, logs, configurations, and other technical signals to monitor control execution, exceptions, and health.
• Partner with Finance, Security, and Engineering to establish automated monitoring and evidence generation for ITGCs and ITACs where feasible.
• Identify control failures, anomalies, exceptions, and emerging compliance gaps; assess financial reporting impact and prioritize remediation with control owners based on risk.
• Help transition assigned Technical SOX areas from point-in-time evidence collection toward continuous monitoring and audit-ready-by-default compliance.
• Identify opportunities to reduce manual SOX compliance activities through reusable monitoring, evidence pipelines, and automation.
• Perform readiness assessments to determine whether technical controls are appropriately designed and operating as intended.
• Support internal and external SOX audits and assessments with reusable technical evidence, risk assessments, and control documentation.
• Assess control gaps and deficiencies, including root causes and potential financial reporting impact, and work with control owners to prioritize and implement remediation.
• Analyze monitoring results, exceptions, audit findings, and recurring issues to identify systemic technology risks and recommend durable improvements.
• Use monitoring and assurance insights to improve risk assessments, system scoping, control design, and monitoring requirements.
• Manage assigned Technical SOX projects end-to-end, including scope, milestones, stakeholder coordination, deliverables, and timely execution.
• Identify project risks, delays, dependencies, and roadblocks; escalate concerns and collaborate on mitigation plans.
• Coordinate external SOX audit support with auditors, Finance, Engineering, and control owners to meet timelines, evidence requests, and deliverables.
• Participate in audit walkthroughs and help control owners prepare by reviewing documentation, technical evidence, and anticipated auditor questions.
• Clarify audit requests with control owners and external auditors, resolve questions, and track open items through completion.
• Coordinate remediation action plans, commitments, deadlines, and execution challenges, escalating delays to support timely closure of control deficiencies.

Benefits

• Generous health and wellness programs.
• Time away for employees of all levels.
• Annual performance bonus may be included in the total compensation package.
• Stock may be included in the total compensation package.
• Benefits and/or other applicable incentive compensation plans may be included in the total compensation package.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior