Senior Analyst, Coinbase

• 5+ years of experience in technology governance, risk, and or compliance
• Strong understanding of MiFID requirements from a technology risk perspective
• Experience working with technology regulations, standards or frameworks such as DORA, ITIL, COBIT, MIFID, NIST CSF
• Strong understanding of risk management principles
• Experience working on remediation projects (new regulation, audit findings)
• Can turn incomplete, conflicting, or ambiguous inputs into action plans
• Experience working within cloud native environments
• Ability to leverage data to inform critical decisions and make recommendations
• Prior experience working with auditors and /or external regulators
• Able to manage multiple stakeholders and priorities simultaneously
• Experience with SQL, ideally in Snowflake or a similar platform

Desirable

• We’re looking for a 2nd line of defense Technology Risk & Controls Analyst to join the Coinbase Ireland team
• This role is pivotal in safeguarding our organization against technological and cybersecurity risks by conducting risk assessments and control evaluation
• The ideal candidate will have a deep understanding of technology frameworks, risk management, and regulatory compliance, and enjoys working cross functionally to analyze and mitigate risk
• Advising on implementation and oversight of technology requirements (e.g. MIFID) to support an evolving product landscape
• Conduct comprehensive second line assessments of technology risks, ensuring alignment with organizational risk appetite and regulatory requirements
• Establish governance and oversight processes to track compliance with the Digital Operational Resilience Act (DORA) and its technological implications for financial institutions
• Review and assess the effectiveness of control measures implemented by the 1st Line of Defense (operational management) and the global business
• Develop and monitor key risk indicators (KRIs) and control metrics to ensure ongoing risk management and compliance
• Assess and adopt global technology policies and standards to ensure compliance with local requirements
• Collaborate with product, engineering, and cybersecurity teams to enhance incident detection and response capabilities
• Prepare management committee materials (operation and/or risk oversight committee, board)
• Prepare and maintain documentation for regulatory reporting and internal audits
• Prepare and present risk and control reports to senior management and stakeholders
• Communicate findings and recommendations effectively to various audiences, including technical and non-technical personnel