Senior Technical Risk & Compliance Analyst
LinkedIn · Mountain View, California, United States · hybrid
LinkedIn is the world's largest professional network, built to create economic opportunity for every member of the global workforce. Our products help people make powerful connections, discover exciting opportunities, build necessary skills, and gain valuable insights every day. We're also committed to providing transformational opportunities for our own employees by investing in their growth. We aspire to create a culture that's built on trust, care, inclusion, and fun – where everyone can succeed.
Join us to transform the way the world works.
At LinkedIn, our approach to flexible work is centered on trust and optimized for culture, connection, clarity, and the evolving needs of our business. The work location of this role is hybrid, meaning it will be performed both from home and from a LinkedIn office on select days, as determined by the business needs of the team.
Governance, Risk, Automation, Compliance & Engineering (GRACE) helps LinkedIn build and maintain a secure, scalable, and sustainable compliance environment. We partner across Security, Engineering, Legal, Privacy, Audit, and other teams to translate risk and compliance requirements into controls that can be implemented, monitored, and continuously improved. Our goal is to move compliance away from fragmented, point-in-time activities toward a lifecycle where requirements, risks, controls, evidence, and monitoring are connected, enabling compliance to scale with LinkedIn’s technology and business.
LinkedIn is seeking a Senior Technical Risk & Compliance Engineer to support the end-to-end GRACE lifecycle, with a focus on Sarbanes-Oxley (SOX) compliance. In this role, you will independently own emerging technology and system-related risks that could impact financial reporting and potentially lead to material misstatements in financial statements, taking them from initial onboarding and risk assessment through control design, implementation partnership, assurance, continuous controls monitoring, and improvement.
You will work closely with Finance and Engineering teams to translate SOX regulatory, financial reporting, and assurance requirements into actionable technical control requirements; evaluate how those controls are implemented across systems and technologies supporting financial reporting; identify and drive remediation of gaps; and establish monitoring that provides ongoing visibility into control health and effectiveness.
This role requires a combination of technical depth and compliance expertise. The ideal candidate should understand financial reporting systems (inhouse and vendor) and technical architectures, analyze data and technical artifacts, assess technology risks that could impact the completeness, accuracy, and integrity of financial reporting, and translate SOX compliance requirements into practical solutions that scale.
Drive the End-to-End Technical Governance, Risk & Compliance Lifecycle for Security
● Independently drive defined Technical SOX compliance areas through the GRACE lifecycle, from initial onboarding and risk assessment through continuous monitoring and improvement.
● Assess technology and system-related risks that could lead to material misstatements in financial statements, evaluating their potential impact on financial reporting.
● Assess existing IT General Controls (ITGCs) and IT Automated Controls (ITACs), including the impact of proposed system, technology, and process changes on existing controls and associated risks.
● Evaluate applicable SOX requirements, financially relevant systems, and technology dependencies to determine appropriate control objectives, control coverage, and compliance gaps.
● Maintain accurate risk-to-control mappings, SOX system scoping, accountable ownership, and supporting documentation in compliance systems of record.
Design and Codify Controls
● Partner with Finance, Security, and Engineering teams to translate SOX requirements and identified risks into practical, testable technical controls within systems and engineering workflows.
● Evaluate system and technology changes to determine the need for new or enhanced controls, recommending efficient, scalable control designs that adequately mitigate risks while minimizing control complexity and redundancy.
● Perform technical assessments of system architecture, data flows, configurations, access models, logs, scripts, queries, code, and other technical artifacts to validate control design and evaluate how controls address identified risks.
● Review existing control design and implementation, recommend improvements, and identify opportunities to embed and automate controls within applications, platforms, infrastructure, and engineering workflows.
● Ensure controls have clear ownership, expected evidence, testable criteria, and monitoring requirements to support SOX compliance.
Establish Continuous Controls Monitoring
● Translate SOX control design and effectiveness criteria into measurable monitoring requirements.
● Use system-generated data, dashboards, telemetry, logs, configurations, and other technical signals to monitor control execution, exceptions, and control health.
● Partner with Finance, Security, and Engineering teams to establish automated monitoring and evidence generation for ITGCs and ITACs where feasible.
● Identify control failures, anomalies, exceptions, and emerging compliance gaps, assess their potential impact on financial reporting, and work with control owners to prioritize remediation based on risk.
● Help transition assigned Technical SOX areas from point-in-time evidence collection and assessments toward continuous controls monitoring and audit-ready-by-default compliance.
● Identify opportunities to reduce manual SOX compliance activities through reusable control monitoring, evidence pipelines, and automation.
Assurance, Remediation & Improvement
● Perform readiness assessments to evaluate whether technical controls are appropriately designed and operating as intended before relying on them for continuous monitoring and assurance.
● Support internal and external SOX audits and assessments with reliable, reusable technical evidence, risk assessments, and control documentation.
● Assess identified control gaps and deficiencies, including root-cause analysis, potential financial reporting impact, and risk-based prioritization, and work with control owners to drive remediation and operationalization of controls.
● Analyze monitoring results, exceptions, audit findings, and recurring control issues to identify systemic technology risks and recommend durable improvements.
● Feed insights from monitoring and assurance back into risk assessments, system scoping, control design, and monitoring requirements to continuously improve the Technical SOX compliance posture.
Technical SOX Project Management & External Audit Coordination
● Manage assigned Technical SOX projects end-to-end, including defining scope, tracking milestones, coordinating deliverables, and ensuring timely execution across stakeholders.
● Proactively identify project execution risks, delays, dependencies, and roadblocks; escalate concerns early to management and collaborate on mitigation plans to ensure timely resolution.
● Provide project management support for external SOX audits, coordinating with external auditors, Finance, Engineering, and control owners to meet audit timelines, evidence requests, and key deliverables.
● Participate in audit walkthroughs and partner with control owners to prepare for walkthrough discussions, including reviewing control documentation, technical evidence, and anticipated auditor questions.
● Coordinate with control owners and external auditors to clarify audit requests, resolve outstanding questions, and track open items through completion.
● Support remediation projects by coordinating action plans, tracking commitments and deadlines, identifying execution challenges, and escalating delays to ensure timely clos