Sr Analyst, Technology Governance & Risk

The Trade Desk•New York, NY

7d•$85,300 - $156,400•Onsite

About The Position

The Trade Desk is seeking a Technology Governance & Risk Senior Analyst to lead and execute governance and risk management initiatives. This role is integral to the Technology Governance, Risk and Compliance program, covering global frameworks like Sarbanes-Oxley (SOX), Service Organization Controls (SOC), and regional regulations such as CCPA and PADFA. The Senior Analyst will contribute to the development, enhancement, and maintenance of technology governance and risk processes, ensuring alignment with internal frameworks. Key responsibilities include technology controls design and implementation, drafting company-wide governance policies, managing risk assessment projects, audit management, and collaborating with stakeholders across Engineering, Finance, Legal, and Cybersecurity to advance regional governance initiatives.

Requirements

BS or BA in relevant field (Computer Science, Information Systems, Finance, Economics, Accounting)
4+ years of experience in technology risk management, governance, compliance, internal audit, information security, or related operational role.
Industry experience in high-technology companies with complex technology environments.
Experience with SOX, SOC, NIST, and ISO frameworks implementation.
Proven ability to design and implement ITGCs and automated controls.
Strong organizational skills and ability to work independently, make effective judgments, and summarize complex information.
Outstanding communication, analytical, and problem-solving abilities; proven cross-functional collaboration.

Nice To Haves

Certifications such as CISSP, CISM, CISA, CIA and/or CIPP preferred
Big 4 experience preferred.
Experience with GRC platforms (e.g., AuditBoard) or leveraging AI tools for GRC preferred.
Light coding skills (e.g., Python, SQL, or APIs) to support automation preferred.

Responsibilities

Drive the execution and maintenance of the governance and risk program to ensure technology and business processes comply with global and regional cybersecurity requirements, including but not limited to SOX, SOC1, SOC2, CCPA, PADFAA, etc.
Execute the full GRC process, including leading risk assessments, issues analysis, controls monitoring, control design, control implementation, policy administration, and implementing corrective actions.
Partner with stakeholders to continuously track relevant updates, designs, changes, and trends to ensure compliance.
Communicate complex governance and risk issues and prepare reporting to stakeholders.
Conduct periodic internal reviews to ensure that GRC procedures are followed and discuss emerging security and privacy compliance issues with the stakeholders.
Perform risk and scoping assessments on design documentation and monitor technology areas to identify gaps, points of improvements, as well as to ensure compliance.
Perform control testing and document test procedures, results, and remediation steps for identified issues as related to compliance efforts.
Collaborate with engineering, legal and business teams to address control gaps and ensure timely remediation.
Collaborate with teams within cybersecurity to ensure compliance with changes to the control environment and regulatory environment.

Benefits

Comprehensive healthcare (medical, dental, and vision) with premiums paid in full for employees and dependents
Retirement benefits such as a 401k plan and company match
Short and long-term disability coverage
Basic life insurance
Well-being benefits
Reimbursement for certain tuition expenses
Parental leave
Sick time of 1 hour per 30 hours worked
Vacation time for full-time employees up to 120 hours thru the first year and 160 hours thereafter
Around 13 paid holidays per year
Employees can also purchase The Trade Desk stock at a discount through The Trade Desk’s Employee Stock Purchase Plan.
Stock-based compensation grants
Variable compensation-based incentives
Commissions