Senior Technical Risk & Compliance Analyst - SOX Compliance

Job description

LinkedIn respects your privacy LinkedIn and 3rd parties use essential and non-essential cookies to provide, secure, analyze and improve our Services, and to show you relevant ads (including professional and job ads ) on and off LinkedIn. Learn more in our Cookie Policy . Select Accept to consent or Reject to decline non-essential cookies for this use. You can update your choices at any time in your settings . Skip to main content Senior Technical Risk & Compliance Analyst - SOX Compliance LinkedIn Mountain View, CA Senior Technical Risk & Compliance Analyst - SOX Compliance LinkedIn Mountain View, CA 6 days ago Be among the first 25 applicants See who LinkedIn has hired for this role Save Report this job LinkedIn is the world's largest professional network, built to create economic opportunity for every member of the global workforce. Our products help people make powerful connections, discover exciting opportunities, build necessary skills, and gain valuable insights every day. We're also committed to providing transformational opportunities for our own employees by investing in their growth. We aspire to create a culture that's built on trust, care, inclusion, and fun – where everyone can succeed. Join us to transform the way the world works. At LinkedIn, our approach to flexible work is centered on trust and optimized for culture, connection, clarity, and the evolving needs of our business. The work location of this role is hybrid, meaning it will be performed both from home and from a LinkedIn office on select days, as determined by the business needs of the team. Job Description Governance, Risk, Automation, Compliance & Engineering (GRACE) helps LinkedIn build and maintain a secure, scalable, and sustainable compliance environment. We partner across Security, Engineering, Legal, Privacy, Audit, and other teams to translate risk and compliance requirements into controls that can be implemented, monitored, and continuously improved. Our goal is to move compliance away from fragmented, point-in-time activities toward a lifecycle where requirements, risks, controls, evidence, and monitoring are connected, enabling compliance to scale with LinkedIn’s technology and business. LinkedIn is seeking a Senior Technical Risk & Compliance Engineer to support the end-to-end GRACE lifecycle, with a focus on Sarbanes-Oxley (SOX) compliance. In this role, you will independently own emerging technology and system-related risks that could impact financial reporting and potentially lead to material misstatements in financial statements, taking them from initial onboarding and risk assessment through control design, implementation partnership, assurance, continuous controls monitoring, and improvement. You will work closely with Finance and Engineering teams to translate SOX regulatory, financial reporting, and assurance requirements into actionable technical control requirements; evaluate how those controls are implemented across systems and technologies supporting financial reporting; identify and drive remediation of gaps; and establish monitoring that provides ongoing visibility into control health and effectiveness. This role requires a combination of technical depth and compliance expertise. The ideal candidate should understand financial reporting systems (inhouse and vendor) and technical architectures, analyze data and technical artifacts, assess technology risks that could impact the completeness, accuracy, and integrity of financial reporting, and translate SOX compliance requirements into practical solutions that scale. Drive the End-to-End Technical Governance, Risk & Compliance Lifecycle for Security ● Independently drive defined Technical SOX compliance areas through the GRACE lifecycle, from initial onboarding and risk assessment through continuous monitoring and improvement. ● Assess technology and system-related risks that could lead to material misstatements in financial statements, evaluating their potential impact on financial reporting. ● Assess existing IT General Controls (ITGCs) and IT Automated Controls (ITACs), including the impact of proposed system, technology, and process changes on existing controls and associated risks. ● Evaluate applicable SOX requirements, financially relevant systems, and technology dependencies to determine appropriate control objectives, control coverage, and compliance gaps. ● Maintain accurate risk-to-control mappings, SOX system scoping, accountable ownership, and supporting documentation in compliance systems of record. Design and Codify Controls ● Partner with Finance, Security, and Engineering teams to translate SOX requirements and identified risks into practical, testable technical controls within systems and engineering workflows. ● Evaluate system and technology changes to determine the need for new or enhanced controls, recommending efficient, scalable control designs that adequately mitigate risks while minimizing control complexity and redundancy. ● Perform technical assessments of system architecture, data flows, configurations, access models, logs, scripts, queries, code, and other technical artifacts to validate control design and evaluate how controls address identified risks. ● Review existing control design and implementation, recommend improvements, and identify opportunities to embed and automate controls within applications, platforms, infrastructure, and engineering workflows. ● Ensure controls have clear ownership, expected evidence, testable criteria, and monitoring requirements to support SOX compliance. Establish Continuous Controls Monitoring ● Translate SOX control design and effectiveness criteria into measurable monitoring requirements. ● Use system-generated data, dashboards, telemetry, logs, configurations, and other technical signals to monitor control execution, exceptions, and control health. ● Partner with Finance, Security, and Engineering teams to establish automated monitoring and evidence generation for ITGCs and ITACs where feasible. ● Identify control failures, anomalies, exceptions, and emerging compliance gaps, assess their potential impact on financial reporting, and work with control owners to prioritize remediation based on risk. ● Help transition assigned Technical SOX areas from point-in-time evidence collection and assessments toward continuous controls monitoring and audit-ready-by-default compliance. ● Identify opportunities to reduce manual SOX compliance activities through reusable control monitoring, evidence pipelines, and automation. Assurance, Remediation & Improvement ● Perform readiness assessments to evaluate whether technical controls are appropriately designed and operating as intended before relying on them for continuous monitoring and assurance. ● Support internal and external SOX audits and assessments with reliable, reusable technical evidence, risk assessments, and control documentation. ● Assess identified control gaps and deficiencies, including root-cause analysis, potential financial reporting impact, and risk-based prioritization, and work with control owners to drive remediation and operationalization of controls. ● Analyze monitoring results, exceptions, audit findings, and recurring control issues to identify systemic technology risks and recommend durable improvements. ● Feed insights from monitoring and assurance back into risk assessments, system scoping, control design, and monitoring requirements to continuously improve the Technical SOX compliance posture. Technical SOX Project Management & External Audit Coordination ● Manage assigned Technical SOX projects end-to-end, including defining scope, tracking milestones, coordinating deliverables, and ensuring timely execution across stakeholders. ● Proactively identify project execution risks, delays, dependencies, and roadblocks; escalate concerns early to management and collaborate on mitigation plans to ensure timely resolution. ● Provide project management support for external