Enterprise Risk Manager

Job Title: Enterprise Risk Manager

Location: 200 Massachusetts Avenue NW, Washington, DC 20001

*Telecommuting permitted: work may be performed within normal commuting distance from The Trade Desk, Inc. office in Washington, DC.

Job Duties: Assist with enhancing and maturing the company's risk management program, including risk management policy, methodology, technology tools, and approach to identification, assessment, prioritization, quantification, remediation, and reporting of risks to senior management and audit committee. Identify risks across the company's operations covering various types of technology risks, including developing a risk library through interviews, surveys, research of technology trends, emerging risks, regulatory and industry level developments. Develop risk mitigation plans for prioritized risks and collaborate with Engineering, Product, and other stakeholders to validate and implement those, as well as maintain and enhance over time. Perform periodic assessments and validation of risk mitigation to determine whether the plans are operating as designed. Perform bespoke risk assessments of various new and emerging risk areas, including major platform related initiatives, and incidents that impact platform's performance and customers. Perform data analytics to deliver risk insights using transactional data such as past and current incident management cases. Apply risk management principles and lessons to guide the company in developing risk management capabilities in the areas such as Information Security, Third-Party Risk Management, Crisis & Incident Management, and current and emerging regulatory requirements. Collaborate across engineering, product management, cybersecurity, compliance, trust & safety, and other functions to present a consolidated and coordinated picture of major risks and themes to senior leaders. Build risk awareness across the organization by providing support, training, and communication. Assess platform incidents for impacts on the organization and coordinate with stakeholders on mitigation actions, and communication of impact and resolution to the senior management. Own risk reporting and documentation processes within the Risk Management module of the company's GRC platform. Maintain the features and enhance reporting processes using resources from the software provider and industry best practices in program management.

Salary: $169,978 - $187,700/year

Job Requirements: Bachelor's degree (U.S. or foreign equivalent) in Computer Science, Information Systems, Electronic Engineering or related field and five (5) years of experience in the job offered or related role OR Master's degree (U.S. or foreign equivalent) in Computer Science, Information Systems, Electronic Engineering or related field and three (3) years of experience in the job offered or related role. Must have three (3) years of ERM program management experience, including risk lifecycle process and executive and board reporting. Must have three (3) years of experience with: technology risks, including technology trends, emerging risks, regulatory and industry level developments; incident management and response for highly technical and complex environment with global-scale platform; building risk capabilities in the technical areas such as Information Security, Third-Party Risk, Crisis & Incident Management; working across engineering, product management, cybersecurity, compliance, and trust and safety to present a consolidated and coordinated picture of major risks and incidents; risk reporting within the GRC platform or security tools; and platform architecture, quality assurance, incident management, code repositories, asset inventories, vulnerability management, data protection,cybersecurity & compliance with various global privacy laws and regulations. Domestic travel required up to 20% of the time for internal meetings.