Senior Technical Risk & Compliance Analyst - Sox Compliance

LinkedIn is the world's largest professional network, built to create economic opportunity for every member of the global workforce. Our products help people make powerful connections, discover exciting opportunities, build necessary skills, and gain valuable insights every day. We're also committed to providing transformational opportunities for our own employees by investing in their growth. We aspire to create a culture that's built on trust, care, inclusion, and fun – where everyone can succeed. Join us to transform the way the world works.

At LinkedIn, our approach to flexible work is centered on trust and optimized for culture, connection, clarity, and the evolving needs of our business. The work location of this role is hybrid, meaning it will be performed both from home and from a LinkedIn office on select days, as determined by the business needs of the team.

About the Role

Governance, Risk, Automation, Compliance & Engineering (GRACE) helps LinkedIn build and maintain a secure, scalable, and sustainable compliance environment. We partner across Security, Engineering, Legal, Privacy, Audit, and other teams to translate risk and compliance requirements into controls that can be implemented, monitored, and continuously improved. Our goal is to move compliance away from fragmented, point-in-time activities toward a lifecycle where requirements, risks, controls, evidence, and monitoring are connected, enabling compliance to scale with LinkedIn’s technology and business.

LinkedIn is seeking a Senior Technical Risk & Compliance Engineer to support the end-to-end GRACE lifecycle, with a focus on Sarbanes-Oxley (SOX) compliance. In this role, you will independently own emerging technology and system-related risks that could impact financial reporting and potentially lead to material misstatements in financial statements, taking them from initial onboarding and risk assessment through control design, implementation partnership, assurance, continuous controls monitoring, and improvement.

Key Responsibilities

• Drive the End-to-End Technical Governance, Risk & Compliance Lifecycle for Security: Independently drive defined Technical SOX compliance areas through the GRACE lifecycle, assess technology risks, evaluate ITGCs/ITACs, and maintain risk-to-control mappings.
• Design and Codify Controls: Partner with Finance, Security, and Engineering to translate SOX requirements into testable controls, evaluate system changes, perform technical assessments of architecture/code/logs, and recommend automation.
• Establish Continuous Controls Monitoring: Translate design criteria into measurable monitoring requirements, leverage system telemetry/logs to monitor health, and transition areas toward audit-ready-by-default compliance.
• Assurance, Remediation & Improvement: Perform readiness assessments, support audits, conduct root-cause analysis on control gaps, and drive remediation.
• Technical SOX Project Management & External Audit Coordination: Manage end-to-end project execution, coordinate with external auditors, facilitate walkthroughs, and ensure timely closure of deficiencies.

Technical SOX Compliance Coverage

The role may support technology risk and SOX compliance activities across financially relevant systems and technical control areas including:

• Identity and Access Management
• Code review
• Familiarity with working on custom homegrown codebased systems
• Segregation of Duties (SoD)
• IT Change Management
• IT Operations
• IT Automated Controls (ITACs)
• Data Integrity and Interfaces
• Cloud and Infrastructure Controls
• Third-Party and Service Organization Controls
• System Implementations and Emerging Technologies

Basic Qualifications

• BA/BS degree in Computer Science, Engineering, Information Systems, Accounting, or a related discipline, or equivalent practical experience.
• 7+ years of experience in Technical SOX compliance, IT risk and controls, technology compliance, technical audit/assurance, or a related field.
• Experience assessing technology and system-related risks that could impact financial reporting.
• Experience evaluating the design and implementation of ITGCs and ITACs.
• Experience analyzing technical artifacts such as system designs, configurations, logs, data, scripts, queries, or code.
• Experience partnering with Finance, Engineering, or Security teams to address technical SOX risk and compliance requirements.
• Ability to independently manage assigned compliance areas and communicate technology risks clearly.

Preferred Qualifications

• Experience across Technical SOX domains such as IAM, IT Change Management, IT Operations, SoD, Automated Application Controls, and Data Integrity.
• Strong understanding of SOX compliance, ICFR, COSO principles, and the application of ITGCs and ITACs.
• Experience assessing technology risks and controls across large-scale distributed systems, cloud infrastructure, or modern software development environments.
• Experience designing or supporting continuous controls monitoring and SOX compliance automation.
• Experience with GRC systems, SOX risk and control matrices, and evidence pipelines.
• Relevant professional certifications such as CISA, CISSP, CRISC, or equivalent.

Suggested Skills

• Databases & SQL: Proficiency in SQL and relational databases (MySQL, Oracle, PostgreSQL, MS SQL Server).
• Cloud & Infrastructure: Working knowledge of AWS, Azure, or GCP, Kubernetes, Docker, Linux, and Terraform.
• Programming & Scripting: Ability to read/analyze code using Python, Java, Bash, PowerShell, or SQL.
• Identity & Access Management: Experience with Active Directory, Microsoft Entra ID, Okta, and cloud IAM.
• Software Development & Change Management: Familiarity with Git, GitHub, Jenkins, GitLab, and CI/CD pipelines.
• Enterprise Applications & Integrations: Understanding of SAP, Oracle ERP, Workday, etc.
• Logging, Monitoring & Automation: Experience with Splunk, Datadog, or CloudWatch.
• Technical Risk & Control Assessment: Ability to assess system architectures and application logic.

Compensation and Benefits

We strongly believe in the well-being of our employees and their families. The pay range for this role is $143,000 to $218,000. Actual compensation packages are based on several factors, including but not limited to skill set, depth of experience, certifications, and specific work location. The total compensation package may also include annual performance bonus, stock, benefits, and/or other applicable incentive compensation plans. For more information, visit https://careers.linkedin.com/benefits.

Equal Opportunity & Accommodations

LinkedIn is proud to be an equal opportunity employer. We are committed to offering an inclusive and accessible experience for all job seekers, including individuals with disabilities. If you need a Reasonable Accommodation to search for a job opening, apply for a position, or participate in the interview process, please fill out an accommodation request here: Accommodation Request Form.

San Francisco Fair Chance Ordinance: Pursuant to the San Francisco Fair Chance Ordinance, LinkedIn will consider for employment qualified applicants with arrest and conviction records.

Pay Transparency Policy Statement: As a federal contractor, LinkedIn follows the Pay Transparency and non-discrimination provisions described at this link: https://lnkd.in/paytransparency.

Global Data Privacy Notice: Please use this link to access documents regarding how LinkedIn handles personal data and the E-Verify Participation Notice: https://www.linkedin.com/legal/candidate-portal.