Senior Technical Risk & Compliance Analyst SOX Compliance

Governance Risk Automation Compliance & Engineering (GRACE) helps LinkedIn build and maintain a secure scalable and sustainable compliance environment. We partner across Security Engineering Legal Privacy Audit and other teams to translate risk and compliance requirements into controls that can be implemented monitored and continuously improved. Our goal is to move compliance away from fragmented point-in-time activities toward a lifecycle where requirements risks controls evidence and monitoring are connected enabling compliance to scale with LinkedIns technology and business.

LinkedIn is seeking a Senior Technical Risk & Compliance Engineer to support the end-to-end GRACE lifecycle with a focus on Sarbanes-Oxley (SOX) this role you will independently own emerging technology and system-related risks that could impact financial reporting and potentially lead to material misstatements in financial statements taking them from initial onboarding and risk assessment through control design implementation partnership assurance continuous controls monitoring and improvement. 

You will work closely with Finance and Engineering teams to translate SOX regulatory financial reporting and assurance requirements into actionable technical control requirements; evaluate how those controls are implemented across systems and technologies supporting financial reporting; identify and drive remediation of gaps; and establish monitoring that provides ongoing visibility into control health and effectiveness.

This role requires a combination of technical depth and compliance expertise. The ideal candidate should understand financial reporting systems (inhouse and vendor) and technical architectures analyze data and technical artifacts assess technology risks that could impact the completeness accuracy and integrity of financial reporting and translate SOX compliance requirements into practical solutions that scale.

Drive the End-to-End Technical Governance Risk & Compliance Lifecycle for Security
Independently drive defined Technical SOX compliance areas through the GRACE lifecycle from initial onboarding and risk assessment through continuous monitoring and improvement.
Assess technology and system-related risks that could lead to material misstatements in financial statements evaluating their potential impact on financial reporting.
Assess existing IT General Controls (ITGCs) and IT Automated Controls (ITACs) including the impact of proposed system technology and process changes on existing controls and associated risks.
Evaluate applicable SOX requirements financially relevant systems and technology dependencies to determine appropriate control objectives control coverage and compliance gaps.
Maintain accurate risk-to-control mappings SOX system scoping accountable ownership and supporting documentation in compliance systems of record.

Design and Codify Controls
Partner with Finance Security and Engineering teams to translate SOX requirements and identified risks into practical testable technical controls within systems and engineering workflows.
Evaluate system and technology changes to determine the need for new or enhanced controls recommending efficient scalable control designs that adequately mitigate risks while minimizing control complexity and redundancy.
Perform technical assessments of system architecture data flows configurations access models logs scripts queries code and other technical artifacts to validate control design and evaluate how controls address identified risks.
Review existing control design and implementation recommend improvements and identify opportunities to embed and automate controls within applications platforms infrastructure and engineering workflows.
Ensure controls have clear ownership expected evidence testable criteria and monitoring requirements to support SOX compliance.

Establish Continuous Controls Monitoring
Translate SOX control design and effectiveness criteria into measurable monitoring requirements.
Use system-generated data dashboards telemetry logs configurations and other technical signals to monitor control execution exceptions and control health.
Partner with Finance Security and Engineering teams to establish automated monitoring and evidence generation for ITGCs and ITACs where feasible.
Identify control failures anomalies exceptions and emerging compliance gaps assess their potential impact on financial reporting and work with control owners to prioritize remediation based on risk.
Help transition assigned Technical SOX areas from point-in-time evidence collection and assessments toward continuous controls monitoring and audit-ready-by-default compliance.
Identify opportunities to reduce manual SOX compliance activities through reusable control monitoring evidence pipelines and automation.

Assurance Remediation & Improvement
Perform readiness assessments to evaluate whether technical controls are appropriately designed and operating as intended before relying on them for continuous monitoring and assurance.
Support internal and external SOX audits and assessments with reliable reusable technical evidence risk assessments and control documentation.
Assess identified control gaps and deficiencies including root-cause analysis potential financial reporting impact and risk-based prioritization and work with control owners to drive remediation and operationalization of controls.
Analyze monitoring results exceptions audit findings and recurring control issues to identify systemic technology risks and recommend durable improvements.
Feed insights from monitoring and assurance back into risk assessments system scoping control design and monitoring requirements to continuously improve the Technical SOX compliance posture.

Technical SOX Project Management & External Audit Coordination
Manage assigned Technical SOX projects end-to-end including defining scope tracking milestones coordinating deliverables and ensuring timely execution across stakeholders.
Proactively identify project execution risks delays dependencies and roadblocks; escalate concerns early to management and collaborate on mitigation plans to ensure timely resolution.
Provide project management support for external SOX audits coordinating with external auditors Finance Engineering and control owners to meet audit timelines evidence requests and key deliverables.
Participate in audit walkthroughs and partner with control owners to prepare for walkthrough discussions including reviewing control documentation technical evidence and anticipated auditor questions.
Coordinate with control owners and external auditors to clarify audit requests resolve outstanding questions and track open items through completion.
Support remediation projects by coordinating action plans tracking commitments and deadlines identifying execution challenges and escalating delays to ensure timely closure of control deficiencies.

Technical SOX Compliance Coverage
The role may support technology risk and SOX compliance activities across financially relevant systems and technical control areas including:
Identity and Access Management
Code review
Familiarity with working on custom homegrown codebased systems
Segregation of Duties (SoD)
IT Change Management
IT Operations
IT Automated Controls (ITACs)
Data Integrity and Interfaces
Cloud and Infrastructure Controls
Third-Party and Service Organization Controls
System Implementations and Emerging Technologies

The successful candidate is not expected to be an expert in every Technical SOX domain but should bring strong technical risk and compliance depth in one or more areas and be able to apply that foundation across adjacent technologies and systems impacting financial reporting.

Qualifications :

Basic Qualifications

• BA/BS degree in Computer Science Engineering Information Systems Accounting or a related discipline or equivalent practical experience.
• 7 years of experience in Technical SOX compliance IT risk and controls technology compliance technical audit/assurance or a related field.
• Experience assessing technology and system-related risks that could impact financial reporting and contribute to material misstatements.
• Experience evaluating the design and implementation of IT General Controls (ITGCs) and IT Automated Controls (ITACs) including identifying control gaps and assessing the impact of system and technology changes.
• Experience analyzing technical artifacts such as system designs configurations logs data scripts queries or code to understand and evaluate control implementation.
• Experience partnering with Finance Engineering or Security teams to address technical SOX risk and compliance requirements.
• Ability to independently manage assigned compliance areas prioritize competing requirements and clearly communicate technology risks control deficiencies and remediation recommendations

Preferred Qualifications

• Experience across Technical SOX domains such as Identity and Access Management IT Change Management IT Operations Segregation of Duties Automated Application Controls and Data Integrity.
• Strong understanding of SOX compliance Internal Controls over Financial Reporting (ICFR) COSO principles and the application of ITGCs and ITACs to financial reporting risks.
• Experience assessing technology risks and controls across large-scale distributed systems cloud infrastructure enterprise applications or modern software development environments.
• Experience evaluating system architecture application configurations code data flows and system integrations to assess technical control design and effectiveness.
• Experience using data telemetry dashboards scripts and automated workflows to evaluate SOX control effectiveness and identify control exceptions.
• Experience designing or supporting continuous controls monitoring automated evidence collection or SOX compliance automation.
• Experience with GRC systems SOX risk and control matrices control inventories evidence pipelines and compliance systems of record.
• Experience supporting SOX readiness assessments internal and external audits control deficiency evaluations or remediation activities.
• Ability to identify systemic patterns across technology risks control deficiencies and audit findings and translate them into scalable control design and process improvements.
• Relevant professional certifications such as CISA CISSP CRISC or equivalent.

Suggested Skills

• Databases & SQL: Proficiency in SQL and experience working with relational databases such as MySQL Oracle PostgreSQL or Microsoft SQL Server to assess data integrity access controls automated controls and financial reporting data flows.
• Cloud & Infrastructure: Working knowledge of cloud platforms such as AWS Azure or GCP and infrastructure technologies including Kubernetes Docker Linux and Terraform to evaluate system configurations and technology risks.
• Programming & Scripting: Ability to read and analyze code scripts and queries using languages such as Python Java Bash PowerShell or SQL to validate technical control design and implementation.
• Identity & Access Management: Experience evaluating access controls permissions privileged access and role-based access models across technologies such as Active Directory Microsoft Entra ID Okta and cloud IAM services.
• Software Development & Change Management: Familiarity with Git GitHub Jenkins GitLab CI/CD pipelines and modern software development practices to assess change management controls and automated deployment processes.
• Enterprise Applications & Integrations: Understanding of enterprise financial systems such as SAP Oracle ERP Workday or similar platforms including APIs data interfaces and automated application controls supporting financial reporting.
• Logging Monitoring & Automation: Experience analyzing system logs configurations and monitoring data using tools such as Splunk Datadog or CloudWatch to evaluate control effectiveness and identify exceptions.
• Technical Risk & Control Assessment: Ability to assess system architectures database configurations application logic and infrastructure changes to identify SOX-relevant risks validate control design and recommend efficient scalable control solutions.

You will Benefit from our Culture:

We strongly believe in the well-being of our employees and their families. That is why we offer generous health and wellness programs and time away for employees of all levels.

LinkedIn is committed to fair and equitable compensation practices.

The pay range for this role is $143000 to $218000. Actual compensation packages are based on several factors that are unique to each candidate including but not limited to skill set depth of experience certifications and specific work location. This may be different in other locations due to differences in the cost of labor.

The total compensation package for this position may also include annual performance bonus stock benefits and/or other applicable incentive compensation plans. For more information visit Information :

Equal Opportunity Statement 

We seek candidates with a wide range of perspectives and backgrounds and we are proud to be an equal opportunity employer. LinkedIn considers qualified applicants without regard to race color religion creed gender national origin age disability veteran status marital status pregnancy sex gender expression or identity sexual orientation citizenship or any other legally protected class.

LinkedIn is committed to offering an inclusive and accessible experience for all job seekers including individuals with disabilities. Our goal is to foster an inclusive and accessible workplace where everyone has the opportunity to be successful.

If you need a Reasonable Accommodation to search for a job opening apply for a position or participate in the interview process connect with us and describe the specific Accommodation requested for a disability-related limitation.
Fill out an Accommodation request here: accommodations are modifications or adjustments to the application or hiring process that would enable you to fully participate in that process. Examples of reasonable accommodations include but are not limited to:

• Documents in alternate formats or read aloud to you
• Having interviews in an accessible location
• Being accompanied by a service dog
• Having a sign language interpreter present for the interview

A request for an accommodation will be responded to within three business days. However non-disability related requests such as following up on an application will not receive a response.

LinkedIn will not discharge or in any other manner discriminate against employees or applicants because they have inquired about discussed or disclosed their own pay or the pay of another employee or applicant. However employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information unless the disclosure is (a) in response to a formal complaint or charge (b) in furtherance of an investigation proceeding hearing or action including an investigation conducted by LinkedIn or (c) consistent with LinkedIns legal duty to furnish information.

San Francisco Fair Chance Ordinance

Pursuant to the San Francisco Fair Chance Ordinance LinkedIn will consider for employment qualified applicants with arrest and conviction records.

Pay Transparency Policy Statement

As a federal contractor LinkedIn follows the Pay Transparency and non-discrimination provisions described at this link: Data Privacy Notice and Compliance Posters for Job Candidates 

Please use this link to access documents that provide information about how LinkedIn handles the personal data of employees and job applicants as well as the E-Verify Participation Notice and the Department of Justice Immigrant and Employee Rights Section Right to Work posters: Work :

No

Employment Type :

Full-time