New

Sr Analyst, Technology Governance & Risk

The Trade Desk
$85,300-$156,400 USD
life insurance, parental leave, paid holidays, sick time, tuition reimbursement, 401(k), retirement plan
United States, New York, New York
Jul 30, 2026
The Trade Desk is a global technology company and the world's leading independent platform for digital advertising, with nearly 4,000 employees across more than 30 offices. Our technology helps advertisers reach the right audiences across the open internet - from streaming TV and podcasts to mobile apps, news, and more. Advertising powers the content people love. By making it more transparent, effective, and responsible, we help support trusted journalism, quality entertainment, and creators worldwide. The world's brands and agencies rely on us to reach their customers and grow their businesses responsibly. The scale of our platform brings unique technical challenges - from processing massive datasets in real time to building systems that operate reliably on a global scale. When you work here, your impact is worldwide. We welcome diverse perspectives, encourage curiosity, and build teams that learn from one another. If you're driven to solve meaningful challenges, we'd love to meet you. WHAT WE DO: We are looking for aTechnology Governance & Risk Senior Analystto lead and execute our governance and risk management initiatives. This role is central toour broader Technology Governance, Risk and Compliance program, encompassing global frameworkswhich includeSarbanes-Oxley(SOX), Service Organization Controls(SOC) and essential regional regulationssuch as California Consumer Privacy Act(CCPA)andProtecting Americans' Data from Foreign Adversaries Act (PADFA)for cybersecurity. The Senior Analystwill assist with the development, improvement and maintenance of technology governance and risk processes, ensuring cross-functional alignment with our internal frameworks. This involves technology controls design and implementation, drafting company-wide governance policies, managing risk assessment projects, audit management, and collaborating closely with stakeholders across Engineering, Finance, Legal, and Cybersecurity to advance regional governance initiatives. WHAT YOU WILL BE DOING: Drivethe execution and maintenance of the governance and risk program to ensure technology and business processescomply withglobal and regionalcybersecurityrequirements, includingbut not limited to SOX, SOC1, SOC2, CCPA, PADFAA, etc. Executethe full GRC process, including leading risk assessments, issues analysis,controlsmonitoring,controldesign, control implementation,policy administration, and implementing corrective actions. Partner with stakeholders tocontinuously track relevant updates, designs, changes, and trends to ensure compliance. Communicate complex governanceandriskissuesandprepare reportingtostakeholders. Conduct periodic internal reviews to ensure thatGRCprocedures are followed and discuss emergingsecurity and privacy complianceissues with the stakeholders. Perform risk and scoping assessments on design documentation andmonitortechnology areas to identify gaps, points of improvements, as well as to ensure compliance. Perform control testing and document test procedures, results, and remediation steps foridentifiedissuesas related to compliance efforts. Collaborate with engineering, legalandbusinessteams to address control gaps and ensuretimelyremediation. Collaborate with teams within cybersecurity to ensure compliance with changes to the control environment and regulatory environment. WHO YOU ARE: BS or BA in relevant field (Computer Science, Information Systems, Finance, Economics, Accounting) Certifications such as CISSP, CISM, CISA,CIAand/or CIPPpreferred 4+ years of experience in technology risk management, governance, compliance, internal audit, information security, or related operational role. Big 4 experience preferred. Industry experience in high-technology companies with complex technology environments. Experience with SOX, SOC,NIST, andISOframeworksimplementation. Proven ability to design andimplementITGCsandautomated controls. Strong organizational skills and ability to work independently, make effective judgments, and summarize complex information. Outstanding communication, analytical, and problem-solving abilities; proven cross-functional collaboration. Experience with GRC platforms (e.g.,AuditBoard) orleveragingAI tools for GRCpreferred. Light coding skills (e.g., Python, SQL, or APIs) to support automationpreferred. The Trade Desk does not accept unsolicited resumes from search firm recruiters. Fees will not be paid in the event a candidate submitted by a recruiter without an agreement in place is hired; such resumes will be deemed the sole property of The Trade Desk. The Trade Desk is an equal opportunity employer. All aspects of employment will be based on merit, competence, performance, and business needs. We do not discriminate on the basis of race, color, religion, marital status, age, national origin, ancestry, physical or mental disability, medical condition, pregnancy, genetic information, gender, sexual orientation, gender identity or expression, veteran status, or any other status protected under federal, state, or local law. [LA JOBS ONLY] The Trade Desk will consider qualified applicants with criminal histories for employment in a manner consistent with the requirements of the Los Angeles Fair Chance Initiative for Hiring, Ordinance No. 184652. [SF JOBS ONLY] Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records. In accordance with various US state laws, the range provided is the Trade Desk's reasonable estimate of the base compensation for this role. The actual amount may differ based on non-discriminatory factors such as experience, knowledge, skills, and location.All employees may be eligible to become The Trade Desk shareholders through eligibility for stock-based compensation grants, which are awarded to employees based on company and individual performance. The Trade Desk also offers other compensation depending on the role such as variable compensation-based incentives and commissions. Plus, expected benefits for this role include comprehensive healthcare (medical, dental, and vision) with premiums paid in full for employees and dependents, retirement benefits such as a 401k plan and company match, short and long-term disability coverage, basic life insurance, well-being benefits, reimbursement for certain tuition expenses, parental leave, sick time of 1 hour per 30 hours worked, vacation time for full-time employees up to 120 hours thru the first year and 160 hours thereafter, and around 13 paid holidays per year. Employees can also purchase The Trade Desk stock at a discount through The Trade Desk's Employee Stock Purchase Plan. The Trade Desk also offers a competitive benefits package. Click here to learn more. Note: Interns are not eligible for variable incentive awards such as stock-based compensation, retirement plan, vacation, tuition reimbursement or parental leave At the Trade Desk, Base Salary is one part of our competitive total compensation and benefits package and is determined using a salary range. The base salary range for this role is $85,300 — $156,400 USD As an Equal Opportunity Employer, The Trade Desk is committed to creating an inclusive hiring experience where everyone has the opportunity to thrive. Please reach out to us ataccommodations@thetradedesk.comto request an accommodation or discuss any accessibility needs you may require to access our Company Website or navigate any part of the hiring process. When you contact us, please include your preferred contact details and specify the nature of your accommodation request or questions. Any information you share will be handled confidentially and will not impact our hiring decisions.