Company Description LinkedIn is the world's largest professional network, built to create economic opportunity for every member of the global workforce. Our products help people make powerful connections, discover exciting opportunities, build necessary skills, and gain valuable insights every day. We're also committed to providing transformational opportunities for our own employees by investing in their growth. We aspire to create a culture that's built on trust, care, inclusion, and fun – where everyone can succeed. Join us to transform the way the world works. At LinkedIn, our approach to flexible work is centered on trust and optimized for culture, connection, clarity, and the evolving needs of our business. The work location of this role is hybrid, meaning it will be performed both from home and from a LinkedIn office on select days, as determined by the business needs of the team.
Job Description
Governance, Risk, Automation, Compliance & Engineering (GRACE) helps LinkedIn build and maintain a secure, scalable, and sustainable compliance environment. We partner across Security, Engineering, Legal, Privacy, Audit, and other teams to translate risk and compliance requirements into controls that can be implemented, monitored, and continuously improved. Our goal is to move compliance away from fragmented, point-in-time activities toward a lifecycle where requirements, risks, controls, evidence, and monitoring are connected, enabling compliance to scale with LinkedIn’s technology and business. LinkedIn is seeking a Senior Technical Risk & Compliance Engineer to support the end-to-end GRACE lifecycle, with a focus on Sarbanes-Oxley (SOX) compliance. In this role, you will independently own emerging technology and system-related risks that could impact financial reporting and potentially lead to material misstatements in financial statements, taking them from initial onboarding and risk assessment through control design, implementation partnership, assurance, continuous controls monitoring, and improvement. You will work closely with Finance and Engineering teams to translate SOX regulatory, financial reporting, and assurance requirements into actionable technical control requirements; evaluate how those controls are implemented across systems and technologies supporting financial reporting; identify and drive remediation of gaps; and establish monitoring that provides ongoing visibility into control health and effectiveness.
This role requires a combination of technical depth and compliance expertise. The ideal candidate should understand financial reporting systems (inhouse and vendor) and technical architectures, analyze data and technical artifacts, assess technology risks that could impact the completeness, accuracy, and integrity of financial reporting, and translate SOX compliance requirements into practical solutions that scale. Drive the End-to-End Technical Governance, Risk & Compliance Lifecycle for Security
- Independently drive defined Technical SOX compliance areas through the GRACE lifecycle, from initial onboarding and risk assessment through continuous monitoring and improvement.
- Assess technology and system-related risks that could lead to material misstatements in financial statements, evaluating their potential impact on financial reporting.
- Assess existing IT General Controls (ITGCs) and IT Automated Controls (ITACs), including the impact of proposed system, technology, and process changes on existing controls and associated risks.
- Evaluate applicable SOX requirements, financially relevant systems, and technology dependencies to determine appropriate control objectives, control coverage, and compliance gaps.
- Maintain accurate risk-to-control mappings, SOX system scoping, accountable ownership, and supporting documentation in compliance systems of record.
Design and Codify Controls
- Partner with Finance, Security, and Engineering teams to translate SOX requirements and identified risks into practical, testable technical controls within systems and engineering workflows.
- Evaluate system and technology changes to determine the need for new or enhanced controls, recommending efficient, scalable control designs that adequately mitigate risks while minimizing control complexity and redundancy.
- Perform technical assessments of system architecture, data flows, configurations, access models, logs, scripts, queries, code, and other technical artifacts to validate control design and evaluate how controls address identified risks.
- Review existing control design and implementation, recommend improvements, and identify opportunities to embed and automate controls within applications, platforms, infrastructure, and engineering workflows.
- Ensure controls have clear ownership, expected evidence, testable criteria, and monitoring requirements to support SOX compliance.
Establish Continuous Controls Monitoring
- Translate SOX control design and effectiveness criteria into measurable monitoring requirements.
- Use system-generated data, dashboards, telemetry, logs, configurations, and other technical signals to monitor control execution, exceptions, and control health.
- Partner with Finance, Security, and Engineering teams to establish automated monitoring and evidence generation for ITGCs and ITACs where feasible.
- Identify control failures, anomalies, exceptions, and emerging compliance gaps, assess their potential impact on financial reporting, and work with control owners to prioritize remediation based on risk.
- Help transition assigned Technical SOX areas from point-in-time evidence collection and assessments toward continuous controls monitoring and audit-ready-by-default compliance.
- Identify opportunities to reduce manual SOX compliance activities through reusable control monitoring, evidence pipelines, and automation.
Assurance, Remediation & Improvement
- Perform readiness assessments to evaluate whether technical controls are appropriately designed and operating as intended before relying on them for continuous monitoring and assurance.
- Support internal and external SOX audits and assessments with reliable, reusable technical evidence, risk assessments, and control documentation.
- Assess identified control gaps and deficiencies, including root-cause analysis, potential financial reporting impact, and risk-based prioritization, and work with control owners to drive remediation and operationalization of controls.
- Analyze monitoring results, exceptions, audit findings, and recurring control issues to identify systemic technology risks and recommend durable improvements.
- Feed insights from monitoring and assurance back into risk assessments, system scoping, control design, and monitoring requirements to continuously improve the Technical SOX compliance posture.
Technical SOX Project Management & External Audit Coordination
- Manage assigned Technical SOX projects end-to-end, including defining scope, tracking milestones, coordinating deliverables, and ensuring timely execution across stakeholders.
- Proactively identify project execution risks, delays, dependencies, and roadblocks; escalate concerns early to management and collaborate on mitigation plans to ensure timely resolution.
- Provide project management support for external SOX audits, coordinating with external auditors, Finance, Engineering, and control owners to meet audit timelines, evidence requests, and key deliverables.
- Participate in audit walkthroughs and partner with control owners to prepare for walkthrough discussions, including reviewing control documentation, technical evidence, and anticipated auditor questions.
- Coordinate with control owners and external auditors to clarify audit requests, resolve outstanding questions, and track open items through completion.
- Support remediation projects by coordinating action plans, tracking commitments and deadlines, identifying execution challenges, and escalating delays to ensure timely closure of control deficiencies.
Technical SOX Compliance Coverage
The role may support technology risk and SOX compliance activities across financially relevant systems and technical control areas including:
- Identity and Access Management
- Code review
- Familiarity with working on custom homegrown codebased systems
- Segregation of Duties (SoD)
- IT Change Management
- IT Operations
- IT Automated Controls (ITACs)
- Data Integrity and Interfaces
- Cloud and Infrastructure Controls
- Third-Party and Service Organization Controls
- System Implementations and Emerging Technologies
The successful candidate is not expected to be an expert in every Technical SOX domain but should bring strong technical risk and compliance depth in one or more areas and be able to apply that foundation across adjacent technologies and systems impacting financial reporting.
Qualifications
Basic Qualifications
- BA/BS degree in Computer Science, Engineering, Information Systems, Accounting, or a related discipline, or equivalent practical experience.
- 7+ years of experience in Technical SOX compliance, IT risk and controls, technology compliance, technical audit/assurance, or a related field.
- Experience assessing technology and system-related risks that could impact financial reporting and contribute to material misstatements.
- Experience evaluating the design and implementation of IT General Controls (ITGCs) and IT Automated Controls (ITACs), including identifying control gaps and assessing the impact of system and technology changes.
- Experience analyzing technical artifacts such as system designs, configurations, logs, data, scripts, queries, or code to understand and evaluate control implementation.
- Experience partnering with Finance, Engineering, or Security teams to address technical SOX risk and compliance requirements.
- Ability to independently manage assigned compliance areas, prioritize competing requirements, and clearly communicate technology risks, control deficiencies, and remediation recommendations
Preferred Qualifications
- Experience across Technical SOX domains such as Identity and Access Management, IT Change Management, IT Operations, Segregation of Duties, Automated Application Controls, and Data Integrity.
- Strong understanding of SOX compliance, Internal Controls over Financial Reporting (ICFR), COSO principles, and the application of ITGCs and ITACs to financial reporting risks.
- Experience assessing technology risks and controls across large-scale distributed systems, cloud infrastructure, enterprise applications, or modern software development environments.
- Experience evaluating system architecture, application configurations, code, data flows, and system integrations to assess technical control design and effectiveness.
- Experience using data, telemetry, dashboards, scripts, and automated workflows to evaluate SOX control effectiveness and identify control exceptions.
- Experience designing or supporting continuous controls monitoring, automated evidence collection, or SOX compliance automation.
- Experience with GRC systems, SOX risk and control matrices, control inventories, evidence pipelines, and compliance systems of record.
- Experience supporting SOX readiness assessments, internal and external audits, control deficiency evaluations, or remediation activities.
- Ability to identify systemic patterns across technology risks, control deficiencies, and audit findings and translate them into scalable control design and process improvements.
- Relevant professional certifications such as CISA, CISSP, CRISC, or equivalent.
Suggested Skills
- Databases & SQL: Proficiency in SQL and experience working with relational databases such as MySQL, Oracle, PostgreSQL, or Microsoft SQL Server to assess data integrity, access controls, automated controls, and financial reporting data flows.
- Cloud & Infrastructure: Working knowledge of cloud platforms such as AWS, Azure, or GCP, and infrastructure technologies including Kubernetes, Docker, Linux, and Terraform to evaluate system configurations and technology risks.
- Programming & Scripting: Ability to read and analyze code, scripts, and queries using languages such as Python, Java, Bash, PowerShell, or SQL to validate technical control design and implementation.
- Identity & Access Management: Experience evaluating access controls, permissions, privileged access, and role-based access models across technologies such as Active Directory, Microsoft Entra ID, Okta, and cloud IAM services.
- Software Development & Change Management: Familiarity with Git, GitHub, Jenkins, GitLab, CI/CD pipelines, and modern software development practices to assess change management controls and automated deployment processes.
- Enterprise Applications & Integrations: Understanding of enterprise financial systems such as SAP, Oracle ERP, Workday, or similar platforms, including APIs, data interfaces, and automated application controls supporting financial reporting.
- Logging, Monitoring & Automation: Experience analyzing system logs, configurations, and monitoring data using tools such as Splunk, Datadog, or CloudWatch to evaluate control effectiveness and identify exceptions.
- Technical Risk & Control Assessment: Ability to assess system architectures, database configurations, application logic, and infrastructure changes to identify SOX-relevant risks, validate control design, and recommend efficient, scalable control solutions.
You will Benefit from our Culture:
We strongly believe in the well-being of our employees and their families. That is why we offer generous health and wellness programs and time away for employees of all levels. LinkedIn is committed to fair and equitable compensation practices. The pay range for this role is $143,000 to $218,000. Actual compensation packages are based on several factors that are unique to each candidate, including but not limited to skill set, depth of experience, certifications, and specific work location. This may be different in other locations due to differences in the cost of labor. The total compensation package for this position may also include annual performance bonus, stock, benefits and/or other applicable incentive compensation plans. For more information, visit https://careers.linkedin.com/benefits. Additional Information
Equal Opportunity Statement We seek candidates with a wide range of perspectives and backgrounds and we are proud to be an equal opportunity employer. LinkedIn considers qualified applicants without regard to race, color, religion, creed, gender, national origin, age, disability, veteran status, marital status, pregnancy, sex, gender expression or identity, sexual orientation, citizenship, or any other legally protected class. LinkedIn is committed to offering an inclusive and accessible experience for all job seekers, including individuals with disabilities. Our goal is to foster an inclusive and accessible workplace where everyone has the opportunity to be successful. If you need a Reasonable Accommodation to search for a job opening, apply for a position, or participate in the interview process, connect with us and describe the specific Accommodation requested for a disability-related limitation.
Fill out an Accommodation request here: https://app.smartsheet.com/b/form/b660a0327d044969abfd7a4e73d15c36 Reasonable accommodations are modifications or adjustments to the application or hiring process that would enable you to fully participate in that process. Examples of reasonable accommodations include but are not limited to:
- Documents in alternate formats or read aloud to you
- Having interviews in an accessible location
- Being accompanied by a service dog
- Having a sign language interpreter present for the interview
A request for an accommodation will be responded to within three business days. However, non-disability related requests, such as following up on an application, will not receive a response. LinkedIn will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by LinkedIn, or (c) consistent with LinkedIn's legal duty to furnish information. San Francisco Fair Chance Ordinance Pursuant to the San Francisco Fair Chance Ordinance, LinkedIn will consider for employment qualified applicants with arrest and conviction records.
Pay Transparency Policy Statement As a federal contractor, LinkedIn follows the Pay Transparency and non-discrimination provisions described at this link: https://lnkd.in/paytransparency.
Global Data Privacy Notice and Compliance Posters for Job Candidates Please use this link to access documents that provide information about how LinkedIn handles the personal data of employees and job applicants, as well as the E-Verify Participation Notice and the Department of Justice Immigrant and Employee Rights Section Right to Work posters: https://www.linkedin.com/legal/candidate-portal.