Senior Analyst, Tech Risk and Controls

Details

Ready to be pushed beyond what you think you’re capable of?

At Coinbase, our mission is to increase economic freedom in the world. We’re building the emerging onchain platform and the future global financial system. Coinbase is seeking a Senior Analyst, Technology Risk & Controls to support the implementation and maturity of our technology and security controls lifecycle program. This role is crucial in maturing our Continuous Controls Monitoring (CCM) program, ensuring the effectiveness and efficiency of technology and security controls. The ideal candidate will have a strong background in controls, robust technical skills in data analysis, and a preference for low-code/no-code platform automation. In-person participation is required throughout the year for team and company-wide offsites.

Responsibilities

• Lead initiatives to enhance and mature the Continuous Controls Monitoring (CCM) program, identify opportunities for automation, improve data quality, and expand monitoring coverage.
• Use data analysis tools and techniques to monitor control effectiveness, identify anomalies, and generate actionable insights and reports for stakeholders.
• Develop and implement automated solutions using low-code/no-code platforms to streamline control testing, monitoring, and reporting processes.
• Create and maintain comprehensive documentation for controls and processes and provide training to internal teams on control best practices and monitoring procedures.
• Maintain awareness of international regulation, emerging threats, policies, and industry benchmarks relevant to technology risk and controls.

Requirements

• 6+ years of experience working in a 1st or 2nd Line of Defense controls management function and/or Governance, Risk, and Compliance (GRC) organization.
• Technical data analysis skills and proficiency with tools such as SQL, Python, R, Excel, Looker, and Snowflake for extracting, transforming, and analyzing large datasets.
• Comfortable using project management tooling (e.g., Jira, Archer) and quantitative and qualitative data analytics tooling.
• Strong control domain knowledge: ability to investigate the technology and security stack, understand controls, and propose candidates for automation.
• Clear and concise communicator and writer; experience operationalizing project plans across stakeholders, holding teams accountable, and documenting deliverables for both junior and senior audiences. Ability to translate compliance language into functional requirements across technical stakeholders.
• Ability to navigate ambiguity and complexity, manage queues against strategic priorities, and handle multiple assessments concurrently.
• Familiarity with standards and frameworks (e.g., ISO 27001/5, NIST CSF, COBIT, ITIL, DORA) and risk quantification methodologies to measure, monitor, validate, and evidence controls and remediation.
• Working knowledge of major regulatory/legal frameworks (US and international) affecting technology organizations.
• Strong organization and project management skills in fast-moving and demanding environments.

Nice to haves

• Experience with low-code/no-code automation platforms (e.g., Workato, UiPath, Appian).
• Coding knowledge is a plus (e.g., building data joins, integrations with GRC and data visualization tools).
• Background in FinTech, TradFi, consulting, business operations technical program management, or other customer-facing disciplines.
• Strong knowledge of risk/control issues related to evolving technologies (crypto, cloud, data lakes, machine learning).
• Certifications such as CISA, CISSP, or CISM are a plus.
• Demonstrated beginner/intermediate knowledge of crypto/blockchain/web3.

Pay and Benefits

• Pay Range: $167,280—$196,800 USD (target annual salary; final offer depends on work location). Full-time offers include bonus eligibility, equity eligibility, and benefits (medical, dental, vision, 401(k)).
• Benefits include medical/dental/vision, HSA contributions, disability and life insurance, 401(k) with match, wellness stipend, mobile/internet reimbursement, connections stipend, volunteer time off, fertility counseling/benefits, generous time off/leave policy, and the option to get paid in digital currency.

Additional Information

• Job #: P69475
• #LI-Remote — remote-first role with required in-person participation throughout the year for team/company offsites.
• Coinbase is an Equal Opportunity Employer and provides reasonable accommodations for applicants with disabilities.
• Global data privacy notice and other candidate information are provided in the posting. The posting also describes limited AI pilot usage for interview screening and transcription (humans review interview responses and AI is not used to make final employment decisions).