Analyst, Tech Controls

Details

Coinbase is seeking an Analyst, Tech Controls to support second-line-of-defense technology compliance initiatives and contribute to the maturity of the Technology Risk and Controls program. This role will assist with the design, implementation, and monitoring of a technology control framework and work closely with cross-functional teams to ensure control ownership.

Responsibilities

• Lead IT process and gap assessments against industry standards and regulatory requirements to evaluate control design and operating effectiveness.
• Design, review, and validate processes and configurations across technology systems, including cloud environments, operating systems, databases, and network infrastructure, to ensure alignment with standards, compliance requirements, and best practices.
• Maintain and provide oversight of the technology controls inventory to mitigate technology risks and meet regulatory requirements, policies, and frameworks.
• Collaborate with Security, Engineering, Technology Governance, IT, and Operational Risk to support technology requirements and ensure control ownership.
• Develop technology requirements for new products, update existing controls, and provide subject matter expertise to product teams.
• Support Security Compliance, Information Security, Platform, and Engineering stakeholders in identifying and executing continuous control monitoring opportunities.
• Provide technical guidance to determine effectiveness of change management processes (e.g., unit testing, CI/CD).
• Define, draft, and communicate identified issues and technology process improvement opportunities; assist in developing solutions to mitigate risks and address regulatory challenges.
• Provide reporting to stakeholders and management on progress, escalations, and control initiatives.
• Create procedural documentation and training materials (runbooks, narratives) to support first-line-of-defense risk management.
• Validate remediation efforts to ensure resolution aligns with regulatory requirements, industry standards, and internal policies.
• Drive creation of clear and concise technical documentation for control monitoring.

Requirements

• Minimum of 2+ years of experience in Security Engineering, Technology Compliance, IT audit, or equivalent roles.
• Strong knowledge and hands-on experience with technology frameworks such as COBIT, NIST, and ISO 27001.
• Hands-on experience in security engineering, implementing security frameworks, or designing and managing technical controls.
• Proven technical understanding and operation within cloud technologies (AWS preferred).
• Strong understanding of control monitoring processes.
• Experience reviewing configurations across cloud, OS, database, and network infrastructure.
• Ability to work autonomously across cross-functional teams in ambiguous situations with limited supervision.
• Excellent oral and written communication skills; ability to communicate with technical and non-technical stakeholders.
• Ability to multitask, prioritize work, and meet deadlines in a fast-paced environment.

Nice to haves

• BA or BS in a technical field or equivalent experience.
• Cloud certifications (e.g., AWS Certified Security Specialty) or equivalent.
• Security certifications (e.g., CISA, CISSP, COBIT) or other relevant certifications.
• Technical understanding of fintech services and/or the crypto space.

Benefits

• Target bonus, target equity, and benefits (medical, dental, vision, 401(k)).
• Medical, dental and vision plans with generous employee contributions.
• Health Savings Account with company contributions.
• Disability and life insurance.
• 401(k) plan with company match.
• Wellness stipend, mobile/internet reimbursement, connections stipend.
• Volunteer time off, fertility counseling and benefits.
• Generous time off/leave policy and the option of getting paid in digital currency.

Compensation

• Pay Range: $135,320 — $159,200 USD (target annual salary; full-time offers also include target bonus + target equity + benefits).

Location & Work Model

• Role is listed as remote-first (#LI-Remote). In-person participation is required throughout the year for team and company offsites. Specific work location is not listed in the posting; compensation may vary by work location.

Additional Notes

• Position ID: P60079
• Coinbase emphasizes equal opportunity and provides accommodations for applicants with disabilities. The posting includes an AI disclosure about pilot tools used for initial screening for select roles.