Analyst, Tech Controls

Details

At Coinbase, our mission is to increase economic freedom globally by building the onchain platform and future global financial system. We seek a candidate passionate about crypto and blockchain who thrives on solving difficult problems with high-caliber colleagues.

Our work culture is intense, requiring in-person participation throughout the year along with multiple team and company-wide offsites for collaboration and alignment.

Coinbase stores more digital currency than any company, making security a core mission and competitive differentiator. The Analyst, Tech Controls, supports second line of defense technology compliance initiatives by designing, implementing, and monitoring a technology control framework. This role collaborates cross-functionally to ensure control ownership and mature the Technology Risk and Controls program.

Responsibilities

• Lead IT process and gap assessments against industry standards and regulatory requirements to evaluate control design and effectiveness
• Design, review, and validate processes and configurations across technology systems including cloud environments, OS, databases, and network infrastructure
• Maintain oversight over the technology controls inventory to mitigate risks and meet regulatory, policy, and framework requirements
• Collaborate with Security, Engineering, Technology Governance, IT, and Operational Risk teams to support tech requirements and control ownership
• Develop technology requirements for new products, update existing controls, and provide SME expertise to product teams
• Support stakeholders in continuous control monitoring opportunities
• Provide guidance on evaluating change management process effectiveness including unit testing, CI/CD
• Define and communicate identified issues and process improvement opportunities, assist in creative mitigation solutions
• Report on progress, escalations, and initiatives to stakeholders and management
• Create procedural documentation including training materials to support first line risk management
• Validate remediation of gaps to ensure alignment with regulatory and internal policies
• Produce clear technical documentation for control monitoring

Requirements

• Minimum 2+ years experience in Security Engineering, Technology Compliance, or IT audit
• Strong knowledge and hands-on experience with frameworks such as COBIT, NIST, ISO 27001
• Hands-on experience implementing security frameworks or managing technical controls
• Technical understanding and operational experience with cloud technologies, AWS preferred
• Solid understanding of control monitoring processes
• Excellent oral and written communication skills
• Ability to work autonomously and cross-functionally in ambiguous situations
• Strong multitasking and prioritization skills in fast-paced environments
• Comfortable communicating with technical and non-technical stakeholders

Nice to Haves

• BA or BS in a technical field or equivalent experience
• AWS Certified Security Specialty or equivalent cloud certifications
• Security certifications like CISA, CISSP, COBIT
• Technical understanding of fintech and crypto space

Benefits

• Medical, dental, vision plans with generous contributions
• Health Savings Account with company contributions
• Disability and life insurance
• 401(k) plan with company match
• Wellness, mobile/internet, and connections stipends
• Volunteer Time Off
• Fertility counseling and benefits
• Generous time off/leave policy
• Option to be paid in digital currency

Salary Range: $135,320 - $159,200 USD annually

This role is remote-first with required in-person participation throughout the year and company offsites.