Senior Technical Risk & Compliance Analyst

LinkedIn is the world's largest professional network, built to create economic opportunity for every member of the global workforce. Our products help people make powerful connections, discover exciting opportunities, build necessary skills, and gain valuable insights every day. We're also committed to providing transformational opportunities for our own employees by investing in their growth. We aspire to create a culture that's built on trust, care, inclusion, and fun – where everyone can succeed.

Join us to transform the way the world works.

At LinkedIn, our approach to flexible work is centered on trust and optimized for culture, connection, clarity, and the evolving needs of our business. The work location of this role is hybrid, meaning it will be performed both from home and from a LinkedIn office on select days, as determined by the business needs of the team.

Governance, Risk, Automation, Compliance & Engineering (GRACE) helps LinkedIn build and maintain a secure, scalable, and sustainable compliance environment. We partner across Security, Engineering, Legal, Privacy, Audit, and other teams to translate risk and compliance requirements into controls that can be implemented, monitored, and continuously improved. Our goal is to move compliance away from fragmented, point-in-time activities toward a lifecycle where requirements, risks, controls, evidence, and monitoring are connected, enabling compliance to scale with LinkedIn’s technology and business.

LinkedIn is seeking a Senior Technical Risk & Compliance Engineer to support the end-to-end GRACE lifecycle, with a focus on Sarbanes-Oxley (SOX) compliance. In this role, you will independently own emerging technology and system-related risks that could impact financial reporting and potentially lead to material misstatements in financial statements, taking them from initial onboarding and risk assessment through control design, implementation partnership, assurance, continuous controls monitoring, and improvement.

You will work closely with Finance and Engineering teams to translate SOX regulatory, financial reporting, and assurance requirements into actionable technical control requirements; evaluate how those controls are implemented across systems and technologies supporting financial reporting; identify and drive remediation of gaps; and establish monitoring that provides ongoing visibility into control health and effectiveness.

This role requires a combination of technical depth and compliance expertise. The ideal candidate should understand financial reporting systems (inhouse and vendor) and technical architectures, analyze data and technical artifacts, assess technology risks that could impact the completeness, accuracy, and integrity of financial reporting, and translate SOX compliance requirements into practical solutions that scale.

Drive the End-to-End Technical Governance, Risk & Compliance Lifecycle for Security
● Independently drive defined Technical SOX compliance areas through the GRACE lifecycle, from initial onboarding and risk assessment through continuous monitoring and improvement.
● Assess technology and system-related risks that could lead to material misstatements in financial statements, evaluating their potential impact on financial reporting.
● Assess existing IT General Controls (ITGCs) and IT Automated Controls (ITACs), including the impact of proposed system, technology, and process changes on existing controls and associated risks.
● Evaluate applicable SOX requirements, financially relevant systems, and technology dependencies to determine appropriate control objectives, control coverage, and compliance gaps.
● Maintain accurate risk-to-control mappings, SOX system scoping, accountable ownership, and supporting documentation in compliance systems of record.

Design and Codify Controls

● Partner with Finance, Security, and Engineering teams to translate SOX requirements and identified risks into practical, testable technical controls within systems and engineering workflows.
● Evaluate system and technology changes to determine the need for new or enhanced controls, recommending efficient, scalable control designs that adequately mitigate risks while minimizing control complexity and redundancy.
● Perform technical assessments of system architecture, data flows, configurations, access models, logs, scripts, queries, code, and other technical artifacts to validate control design and evaluate how controls address identified risks.
● Review existing control design and implementation, recommend improvements, and identify opportunities to embed and automate controls within applications, platforms, infrastructure, and engineering workflows.
● Ensure controls have clear ownership, expected evidence, testable criteria, and monitoring requirements to support SOX compliance.

Establish Continuous Controls Monitoring

● Translate SOX control design and effectiveness criteria into measurable monitoring requirements.
● Use system-generated data, dashboards, telemetry, logs, configurations, and other technical signals to monitor control execution, exceptions, and control health.
● Partner with Finance, Security, and Engineering teams to establish automated monitoring and evidence generation for ITGCs and ITACs where feasible.
● Identify control failures, anomalies, exceptions, and emerging compliance gaps, assess their potential impact on financial reporting, and work with control owners to prioritize remediation based on risk.
● Help transition assigned Technical SOX areas from point-in-time evidence collection and assessments toward continuous controls monitoring and audit-ready-by-default compliance.
● Identify opportunities to reduce manual SOX compliance activities through reusable control monitoring, evidence pipelines, and automation.

Assurance, Remediation & Improvement

● Perform readiness assessments to evaluate whether technical controls are appropriately designed and operating as intended before relying on them for continuous monitoring and assurance.
● Support internal and external SOX audits and assessments with reliable, reusable technical evidence, risk assessments, and control documentation.
● Assess identified control gaps and deficiencies, including root-cause analysis, potential financial reporting impact, and risk-based prioritization, and work with control owners to drive remediation and operationalization of controls.
● Analyze monitoring results, exceptions, audit findings, and recurring control issues to identify systemic technology risks and recommend durable improvements.
● Feed insights from monitoring and assurance back into risk assessments, system scoping, control design, and monitoring requirements to continuously improve the Technical SOX compliance posture.

Technical SOX Project Management & External Audit Coordination
● Manage assigned Technical SOX projects end-to-end, including defining scope, tracking milestones, coordinating deliverables, and ensuring timely execution across stakeholders.
● Proactively identify project execution risks, delays, dependencies, and roadblocks; escalate concerns early to management and collaborate on mitigation plans to ensure timely resolution.
● Provide project management support for external SOX audits, coordinating with external auditors, Finance, Engineering, and control owners to meet audit timelines, evidence requests, and key deliverables.
● Participate in audit walkthroughs and partner with control owners to prepare for walkthrough discussions, including reviewing control documentation, technical evidence, and anticipated auditor questions.
● Coordinate with control owners and external auditors to clarify audit requests, resolve outstanding questions, and track open items through completion.
● Support remediation projects by coordinating action plans, tracking commitments and deadlines, identifying execution challenges, and escalating delays to ensure timely closure of control deficiencies.

Technical SOX Compliance Coverage

The role may support technology risk and SOX compliance activities across financially relevant systems and technical control areas including:
● Identity and Access Management
● Code review
● Familiarity with working on custom homegrown codebased systems
● Segregation of Duties (SoD)
● IT Change Management
● IT Operations
● IT Automated Controls (ITACs)
● Data Integrity and Interfaces
● Cloud and Infrastructure Controls
● Third-Party and Service Organization Controls
● System Implementations and Emerging Technologies

The successful candidate is not expected to be an expert in every Technical SOX domain but should bring strong technical risk and compliance depth in one or more areas and be able to apply that foundation across adjacent technologies and systems impacting financial reporting.

Basic Qualifications

• BA/BS degree in Computer Science, Engineering, Information Systems, Accounting, or a related discipline, or equivalent practical experience.
• 7+ years of experience in Technical SOX compliance, IT risk and controls, technology compliance, technical audit/assurance, or a related field.
• Experience assessing technology and system-related risks that could impact financial reporting and contribute to material misstatements.
• Experience evaluating the design and implementation of IT General Controls (ITGCs) and IT Automated Controls (ITACs), including identifying control gaps and assessing the impact of system and technology changes.
• Experience analyzing technical artifacts such as system designs, configurations, logs, data, scripts, queries, or code to understand and evaluate control implementation.
• Experience partnering with Finance, Engineering, or Security teams to address technical SOX risk and compliance requirements.
• Ability to independently manage assigned compliance areas, prioritize competing requirements, and clearly communicate technology risks, control deficiencies, and remediation recommendations

...

Read the full posting on Linkedin3 →