Senior Security Risk Analyst, GRC

1 day, 4 hours ago
Full-time
Mid Level
Cybersecurity
DoorDash

DoorDash

DoorDash empowers small business owners by providing an affordable and convenient platform for local delivery services, primarily focusing on restaurant food delivery.

Air Freight & Logistics
10K-50K
Founded 2012

Description

  • Lead the global risk management process, including assessments, treatment plans, and translating regulatory or framework changes into controls.
  • Evaluate day-to-day control operation and incorporate threat intelligence on emerging threat actors and attack vectors.
  • Manage policy exceptions by developing compensating controls or documenting risk acceptance cases.
  • Own risk metrics and reporting for key security or engineering areas and drive measurable risk reduction.
  • Collaborate with GRC, security, engineering, and business teams on risk management activities.
  • Deep-dive into business controls, identify failures, and proactively address emerging issues.
  • Improve risk management strategy, tooling, and processes through workflow automation.
  • Maintain an accurate and reliable risk register.

Requirements

  • 4+ years of experience in security risk, GRC, or a related field.
  • Bachelor’s degree in a technology-related field, or an additional 4 years of technology-related work experience.
  • Fluency in risk management frameworks, including the NIST Cybersecurity Framework (CSF).
  • Ability to translate technical risk into actionable language for technical and non-technical audiences.
  • Strong written and verbal communication skills.
  • Experience owning risk metrics and reporting and demonstrating program effectiveness.
  • Experience automating workflows or interest in agentic AI workflows.
  • Experience implementing or using GRC tooling (preferred).
  • Experience with AI-related risk (preferred).
  • Experience with controls assurance and effectiveness testing (preferred).

Benefits

  • U.S. base salary range of $132,600–$195,000, depending on location and qualifications.
  • Equity grant opportunities.
  • 401(k) plan with employer matching.
  • Medical, dental, vision, disability, and basic life insurance.
  • 16 weeks of paid parental leave and family-forming assistance.
  • Flexible paid time off, paid sick leave, and 11 paid holidays.
  • Wellness, commuter benefits matching, and mental health programs.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Security Analyst (Governance and Trust)

Chainguard 51-250 Internet Software & Services

Chainguard is hiring a remote Security Analyst (Governance and Trust) to maintain customer-facing security assurance content and govern AI-enabled workflows that support the Governance and Trust function.

Git
2 days, 3 hours ago

Cyber Security Analyst

World Business Lenders 251-1K Real Estate

World Business Lenders is seeking an entry-level Cybersecurity Engineer to protect systems, devices, and information across its fully remote multinational lending organization by monitoring security activity and strengthening security controls.

Cybersecurity Linux PowerShell Python SIEM
3 days, 4 hours ago

Security Operations Analyst (L1)

JustMarkets 1-10 Capital Markets

Join a fintech innovation team as a full-time Security Operations Analyst responsible for triaging security alerts, conducting initial investigations, and escalating potential incidents.

DNS HTTP Linux macOS PowerShell Python SIEM TCP/IP
5 days, 4 hours ago

Threat Hunter/Purple Team Operator

SIXGEN 51-250 Professional Services

SIXGEN is hiring a mid-level Threat Hunter / Purple Team Operator to hunt for threats, support red team engagements, and improve real-time defensive detection for government and critical-infrastructure customers.

Carbon Black Cybersecurity Elasticsearch PowerShell Python SIEM Splunk
1 week ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers