Enterprise Risk Manager

The Trade Desk is changing the way global brands and their agencies advertise to audiences around the world. How? With a media buying platform that helps brands deliver a more insightful and relevant ad experience for consumers -- and sets a new standard for global reach, accuracy, and transparency. We are proud of the culture we have built. We value the unique experiences and perspectives that each person brings to The Trade Desk, and we are committed to fostering inclusive spaces where everyone can bring their authentic selves to work every day.

So, if you are talented, driven, creative, and eager to join a dynamic, globally-connected team, then we want to talk!

What we do:

This position will report into Senior Manager, Enterprise Risk Management ("ERM"). ERM Manager will be a key member of the Corporate Finance function, assisting with maturing the company's ERM program. 

ERM Manager will assist the ERM team in executing the company's risk management program performing risk assessments, validating existing processes and controls, quantifying risk exposure, developing risk mitigation plans, and reporting on key risk metrics. ERM Manager will also help with maintaining the ERM framework including risk taxonomy, risk assessment criteria, risk repository, ERM policy and procedures, as well as the GRC platform.

The ideal candidate will have an in-depth knowledge and experience in the areas of risk management with proven success stories in a highly complex technology environment based on an internally built platform consisting of multiple components and interfaces. We are looking for someone who is experienced in risk assessment, risk mitigation, and process improvements, while operating successfully in a multi-disciplinary and multi-stakeholder environment. Other success factors for this role include amazing project management and negotiation skills, humility and willing to learn the company's business and risk posture, being comfortable with change, and exhibiting professional curiosity. ERM Manager is an individual contributor role that collaborates with other stakeholders across the company and consistently drives risk mitigation projects forward. There may be opportunities to oversee a team of risk analysts in future as the team grows.

What you'll do:

Risk Identification, Assessment & Response:

• Identify risks across the company's operations covering various types of risks, including developing a risk library through interviews, surveys of key stakeholders complemented by research of industry trends, emerging risks, regulatory and industry level developments.
• Synthesize and assess those risks and classify them by risk priority using the company's risk assessment criteria and other considerations.
• Assist with developing risk mitigation plans for prioritized risks and collaborate with stakeholders to validate and implement those, as well as maintain and enhance the plans over time. Perform periodic reassessments and validation of risk mitigation to determine whether the plans are operating as designed.
• Develop innovative approaches to guide resource allocation and quantification of identified risks, including the impact of a risk on the business, what it takes to mitigate it, and the resultant reduction in risk exposure.
• Perform bespoke risk assessments of various new and emerging risk areas for the organization, including major strategic initiatives, programs, and partnerships.
• Perform data analytics to deliver risk insights using transactional data such as past and current incident management cases. 

Risk Framework:

• Apply risk management principles and lessons to assist the company in developing risk management capability in the areas such as Information Security, Third-Party Risk Management, Crisis & Incident Management, and current and emerging regulatory requirements.
• Collaborate across cybersecurity, compliance, privacy, trust & safety, legal, and other functions to present a consolidated and coordinated picture on major risks and themes to senior leaders.
• Assist with enhancing and maturing the company's risk management program, including risk management policies, procedures, and methodologies.
• Assist with knowledge sharing across the company to establish and mature risk management practices and awareness. 

Risk Reporting:

• Draft reports based on results of risk assessments tailored to the relevant audience.
• Assist with building accountability for risk mitigation among risk owners and other stakeholders through a common understanding of risks, their impact on various departments and the company's business, and alignment of risk mitigation to business objectives.
• Own risk reporting and documentation processes within the Risk Management module of the company's GRC platform. Maintain the features and enhance reporting processes using resources from the software provider and industry best practices in program management.

Who you are: 

• BS or BA in relevant field (Audit, Risk, Compliance, Computer Science, Information Systems, Finance, Economics, Accounting, Engineering). Certifications such as CPA, CISSP, CISM, CISA or CIA, preferred.
• 5+ years of experience including both public accounting or consulting and industry experience. Industry experience with high technology companies - specifically a company that has a complex, custom IT infrastructure is highly preferred.
• Deep technical skills and operational capabilities, including understanding of leading risk frameworks and leading practices such as COSO ERM, ISO 31000, NIST CISF, etc.
• Strong project management skills, self-starter with the ability to work independently and see tasks/projects through to completion, to meet deadlines and to escalate issues, if needed. Ability to juggle multiple high priorities in a fast-paced environment and have a willingness to learn.
• Outstanding communication skills, including written and verbal communications, interpersonal, analytical, negotiation and problem-solving skills. Ability to make effective and independent judgments, including the ability to develop creative solutions to difficult problems.
• Ability to summarize complex and/or technical information into easy-to-understand pieces (distinguishing outcomes from process and analysis) and proven results in data analytics, process improvement and change management.
• The ideal candidate will be a confident and effective communicator who has experience interacting with stakeholders and executive leadership. Stylistically, the candidate must be high-energy, curious, humble, and willing to "roll up their sleeves".
• Willing to travel periodically (e.g., once a month) to TTD headquarters and other offices, for the team and company events.
• Ready to uphold the highest levels of integrity as a baseline. Should have a willingness and ability to lead in a hyper-growth environment - with all the complexity that the environment brings. 

Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.

The Trade Desk does not accept unsolicited resumes from search firm recruiters. Fees will not be paid in the event a candidate submitted by a recruiter without an agreement in place is hired; such resumes will be deemed the sole property of The Trade Desk. The Trade Desk is an equal opportunity employer. All aspects of employment will be based on merit, competence, performance, and business needs. We do not discriminate on the basis of race, color, religion, marital status, age, national origin, ancestry, physical or mental disability, medical condition, pregnancy, genetic information, gender, sexual orientation, gender identity or expression, veteran status, or any other status protected under federal, state, or local law.