Senior Security Risk Analyst, GRC
DoorDash USA · United States - Remote
About this role
## About the Team DoorDash’s Global Governance, Risk and Compliance (GRC) team helps the business scale securely through practical risk-based decisions, reliable controls, and clear accountability. Our third-party risk program protects the systems and data behind our marketplace across DoorDash, Wolt, and Deliveroo. ## About the Role We’re hiring a **Security Risk Specialist** to help run and shape our risk management program and treatment plans. You’ll enable risk and control owners and security teams to keep risk at an acceptable level as the business grows. You’ll work cross-functionally by: - Running risk assessments and reporting - Supporting exception requests when a policy can’t be met - Helping automate tooling and processes that keep our risk register accurate and trustworthy You’ll also help build a more proactive risk function by deep-diving specific business areas, surfacing where controls have failed, and getting ahead of issues before they surface. You’ll report into the **Senior Security Risk Manager** on our GRC team in our Security organization. ## You’ll Be Excited About This Opportunity Because You Will… - Lead our global risk management process (assessing risk, negotiating treatment plans with owners, and turning regulatory/framework changes into working controls) - Get into the detail of how controls operate day-to-day, factoring in threat intelligence to stay ahead of new threat actors and attack vectors - Manage policy exceptions by building compensatory controls or making a case for risk acceptance - Own risk reporting for key areas (e.g., security or engineering), becoming the go-to risk contact for at least one area and reducing risk there in a measurable way - Collaborate and report widely within GRC, security, and across the business - Shape the team’s strategy and tooling as we grow by building your own automations ## We’re Excited About You Because You… - Have **4+ years** of experience in security risk, GRC, or a related field - Have a **Bachelor’s degree** in a technology-related field, or **4 additional years** of work experience in a technology-related field - Are fluent in risk management frameworks, including the **NIST Cybersecurity Framework (CSF)** - Can translate technical risk for both technical and non-technical audiences - Have strong written and verbal communication skills, turning complex control requirements into clear, actionable guidance - Can own risk metrics and reporting—showing (not just asserting) that the program is working - Have experience automating workflows, or an interest in agentic AI workflows ### Nice to Have - Experience implementing or using GRC tooling - Experience with AI-related risk - Experience in controls assurance and effectiveness testing ## Compensation & Benefits (Summary) - **National base pay range (US, including IL and CO): $132,600–$195,000 USD** - Equity grants may be included - Comprehensive benefits package (401(k) match, paid parental leave, wellness benefits, PTO/sick leave, medical/dental/vision, disability/basic life, mental health program, and more) ## About DoorDash DoorDash’s mission empowers local economies. We’re a technology and logistics company focused on helping people get any and all goods—fast—while supporting employee well-being through comprehensive benefits and perks. ## Diversity & Inclusion DoorDash is committed to building and empowering a more inclusive community. If you need accommodations, inform your recruiting contact up
Listing freshness
CronJobs last confirmed this listing 2h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.