Sr Analyst, Technology Governance & Risk

About the role

The Trade Desk is seeking a Technology Governance & Risk Senior Analyst to lead and execute our governance and risk management initiatives. This role is central to our broader Technology Governance, Risk and Compliance program, encompassing global frameworks such as Sarbanes-Oxley (SOX), Service Organization Controls (SOC), and essential regional regulations like California Consumer Privacy Act (CCPA) and Protecting Americans' Data from Foreign Adversaries Act (PADFA).

Responsibilities

• Drive the execution and maintenance of the governance and risk program to ensure technology and business processes comply with global and regional cybersecurity requirements, including but not limited to SOX, SOC1, SOC2, CCPA, PADFA.
• Execute the full GRC process, including leading risk assessments, issues analysis, controls monitoring, control design, control implementation, policy administration, and implementing corrective actions.
• Partner with stakeholders to continuously track relevant updates, designs, changes, and trends to ensure compliance.
• Communicate complex governance and risk issues and prepare reporting to stakeholders.
• Conduct periodic internal reviews to ensure that GRC procedures are followed and discuss emerging security and privacy compliance issues with the stakeholders.
• Perform risk and scoping assessments on design documentation and monitor technology areas to identify gaps, points of improvements, as well as to ensure compliance.
• Perform control testing and document test procedures, results, and remediation steps for identified issues as related to compliance efforts.
• Collaborate with engineering, legal and business teams to address control gaps and ensure timely remediation.
• Collaborate with teams within cybersecurity to ensure compliance with changes to the control environment and regulatory environment.

Requirements

• BS or BA in relevant field (Computer Science, Information Systems, Finance, Economics, Accounting)
• Certifications such as CISSP, CISM, CISA, CIA and/or CIPP preferred
• 4+ years of experience in technology risk management, governance, compliance, internal audit, information security, or related operational role
• Big 4 experience preferred
• Industry experience in high-technology companies with complex technology environments
• Experience with SOX, SOC, NIST, and ISO frameworks implementation
• Proven ability to design and implement ITGCs and automated controls
• Strong organizational skills and ability to work independently, make effective judgments, and summarize complex information
• Outstanding communication, analytical, and problem-solving abilities; proven cross-functional collaboration
• Experience with GRC platforms (e.g., AuditBoard) or leveraging AI tools for GRC preferred
• Light coding skills (e.g., Python, SQL, or APIs) to support automation preferred

Qualifications

• BS or BA in relevant field (Computer Science, Information Systems, Finance, Economics, Accounting)
• 4+ years of experience in technology risk management, governance, compliance, internal audit, information security, or related operational role
• Big 4 experience preferred
• Industry experience in high-technology companies with complex technology environments
• Experience with SOX, SOC, NIST, and ISO frameworks implementation
• Proven ability to design and implement ITGCs and automated controls
• Strong organizational skills and ability to work independently, make effective judgments, and summarize complex information
• Outstanding communication, analytical, and problem-solving abilities; proven cross-functional collaboration
• Experience with GRC platforms (e.g., AuditBoard) or leveraging AI tools for GRC preferred
• Light coding skills (e.g., Python, SQL, or APIs) to support automation preferred

Skills

• Knowledge of SOX, SOC, NIST, and ISO frameworks
• Ability to design and implement ITGCs and automated controls
• Strong organizational and analytical skills
• Excellent communication and problem-solving abilities
• Experience with GRC platforms and AI tools
• Basic coding skills (Python, SQL, APIs)

Benefits

• Comprehensive healthcare (medical, dental, and vision) with premiums paid in full for employees and dependents
• Roth and Traditional 401(k) plans with company match
• Short and long-term disability coverage
• Basic life insurance
• Well-being benefits
• Reimbursement for certain tuition expenses
• Parenthood leave
• Vacation time for full-time employees up to 120 hours thru the first year and 160 hours thereafter
• Around 13 paid holidays per year
• Employee Stock Purchase Plan

Pay

$85,300—$156,400 USD

Schedule

Full-time