Sr Analyst, Technology Governance & Risk

WHAT WE DO:

We are looking for a Technology Governance & Risk Senior Analyst to lead and execute our governance and risk management initiatives. This role is central to our broader Technology Governance, Risk and Compliance program, encompassing global frameworks which include Sarbanes-Oxley (SOX), Service Organization Controls (SOC) and essential regional regulations such as California Consumer Privacy Act (CCPA) and Protecting Americans' Data from Foreign Adversaries Act (PADFA) for cybersecurity.

The Senior Analystwill assist with the development, improvement and maintenance of technology governance and risk processes, ensuring cross-functional alignment with our internal frameworks. This involves technology controls design and implementation, drafting company-wide governance policies, managing risk assessment projects, audit management, and collaborating closely with stakeholders across Engineering, Finance, Legal, and Cybersecurity to advance regional governance initiatives.

WHAT YOU WILL BE DOING:

• Drive the execution and maintenance of the governance and risk program to ensure technology and business processes comply with global and regional cybersecurity requirements, including but not limited to SOX, SOC1, SOC2, CCPA, PADFAA, etc.

• Execute the full GRC process, including leading risk assessments, issues analysis, controls monitoring, control design, control implementation, policy administration, and implementing corrective actions.

• Partner with stakeholders to continuously track relevant updates, designs, changes, and trends to ensure compliance.

• Communicate complex governance and risk issues and prepare reporting to stakeholders.

• Conduct periodic internal reviews to ensure that GRC procedures are followed and discuss emerging security and privacy compliance issues with the stakeholders.

• Perform risk and scoping assessments on design documentation and monitor technology areas to identify gaps, points of improvements, as well as to ensure compliance.

• Perform control testing and document test procedures, results, and remediation steps for identified issues as related to compliance efforts.

• Collaborate with engineering, legal and business teams to address control gaps and ensure timely remediation.

• Collaborate with teams within cybersecurity to ensure compliance with changes to the control environment and regulatory environment.

WHO YOU ARE:

• BS or BA in relevant field (Computer Science, Information Systems, Finance, Economics, Accounting)

• Certifications such as CISSP, CISM, CISA, CIA and/or CIPP preferred

• 4+ years of experience in technology risk management, governance, compliance, internal audit, information security, or related operational role. Big 4 experience preferred.

• Industry experience in high-technology companies with complex technology environments.

• Experience with SOX, SOC, NIST, and ISO frameworks implementation.

• Proven ability to design and implement ITGCs and automated controls.

• Strong organizational skills and ability to work independently, make effective judgments, and summarize complex information.

• Outstanding communication, analytical, and problem-solving abilities; proven cross-functional collaboration.

• Experience with GRC platforms (e.g., AuditBoard) or leveraging AI tools for GRC preferred.

• Light coding skills (e.g., Python, SQL, or APIs) to support automation preferred.

The Trade Desk does not accept unsolicited resumes from search firm recruiters. Fees will not be paid in the event a candidate submitted by a recruiter without an agreement in place is hired; such resumes will be deemed the sole property of The Trade Desk. The Trade Desk is an equal opportunity employer. All aspects of employment will be based on merit, competence, performance, and business needs. We do not discriminate on the basis of race, color, religion, marital status, age, national origin, ancestry, physical or mental disability, medical condition, pregnancy, genetic information, gender, sexual orientation, gender identity or expression, veteran status, or any other status protected under federal, state, or local law.

[LA JOBS ONLY] The Trade Desk will consider qualified applicants with criminal histories for employment in a manner consistent with the requirements of the Los Angeles Fair Chance Initiative for Hiring, Ordinance No. 184652.

[SF JOBS ONLY] Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.