Senior Analyst, Security Compliance (SOX IT)

📋 Description

• • As a Senior Analyst, Security Compliance (SOX IT) at Coinbase, you will play a pivotal role in strengthening our security and IT compliance posture, specifically focusing on the Sarbanes-Oxley (SOX) Act. This position is crucial for ensuring the integrity and reliability of our financial reporting systems by leading and maturing our IT SOX program, acting as a vital second line of defense.
• • You will be instrumental in driving security and IT initiatives that directly support the SOX roadmap, ensuring that our compliance efforts are not only robust but also continuously evolving to meet the dynamic challenges of the crypto industry.
• • A key responsibility will be to assist with comprehensive SOX planning activities. This includes meticulously scoping IT systems that fall under SOX regulations and developing clear, effective training materials for system owners to prepare them for upcoming SOX audits.
• • You will lead rigorous security control gap assessments across the SOX control environment. This involves identifying any deficiencies, recommending practical and effective remediation plans, and diligently tracking these plans through to successful completion.
• • A critical aspect of the role involves assessing the SOX implications of new products and features. You will proactively update relevant controls and communicate compliance requirements to the product organization and other key stakeholders, ensuring that compliance is embedded from the outset.
• • You will be responsible for providing ongoing, clear, and concise reporting to stakeholders and leadership regarding your responsibilities. This includes communicating progress, highlighting any potential escalations, and ensuring alignment across different teams.
• • The role requires performing detailed SOX audit and control impact analyses, particularly in response to security and technology incidents. You will partner closely with owning teams to implement necessary control uplift activities, ensuring lessons learned are integrated into our compliance framework.
• • Building and maintaining strong, collaborative relationships with key stakeholder teams, including Security, IT, Infrastructure, Engineering, Data, and Finance, is paramount. You will serve as a trusted advisor, guiding these teams on SOX requirements and fostering a culture of excellence in control ownership.
• • You will be tasked with creating and improving SOX procedural documentation. This includes developing comprehensive process documentation, detailed data flow diagrams, and uplifting existing templates to ensure clarity, consistency, and adherence to best practices.
• • Working closely with both internal and external auditors will be a significant part of your role. You will be responsible for educating them about our complex technology control environment, facilitating smooth and efficient audit processes.
• • You will oversee the quality of audit initiatives, meticulously identifying and analyzing process gaps. Your expertise will be crucial in providing guidance and support to team members, ensuring a high standard of compliance work.
• • A significant part of this role involves developing creative and innovative solutions to demonstrate effective risk mitigation and to address complex audit challenges unique to the rapidly evolving crypto industry.
• • You will proactively identify opportunities to address systemic program challenges. This includes recommending strategic solutions and driving efficiency improvements, particularly through the adoption of AI and automation technologies where applicable.
• • This position offers a unique opportunity to shape the future of security compliance at a leading cryptocurrency company, contributing directly to our mission of increasing economic freedom in the world by building trust and security in the digital asset space.
• • You will operate in a fast-paced, high-growth environment, requiring adaptability and a proactive approach to problem-solving. Your contributions will directly impact Coinbase's ability to operate securely and compliantly on a global scale.