AI‑Powered Third-Party Risk Analyst

Plaid; North Carolina; Vor Ort; USD 119.000 - 176.000; Vollzeit

Benefits dieser Stelle

Equity

401(k) plan

Medical benefits

Dental benefits

Vision benefits

Zusammenfassung

Plaid is actively expanding its Security Governance, Risk, and Compliance function to manage third-party risk across the ecosystem. You will lead end-to-end vendor risk assessments, scrutinize customer and partner security postures, and keep the lifecycle current with rigorous remediation tracking.

We value strong analytical and documentation skills, with a focus on scalable, repeatable processes. The role emphasizes cross-functional collaboration and thoughtful use of AI to increase throughput

Qualifikationen

• 4+ years of vendor risk management experience.
• Experience running security risk assessments of third parties—and translating findings into defensible risk ratings.
• Familiarity with SOC 2, ISO 27001, NIST CSF, and control domains.
• Experience maturing a third-party risk program with scalable processes.
• Strong written and verbal communication across Security, Legal, Procurement, and GTM.

Aufgaben

• Run Vendor Security Risk Assessments: Triage inbound vendor requests, run security reviews scaled to risk tier, rate the risk, and document findings and exceptions.
• Vet Customer and Partner Security Posture: Review the security practices of customers and partners onboarding to the platform, applying the same standards you use for vendors.
• Keep the Third-Party Risk Lifecycle Current: Maintain risk tiering, drive reassessments on cadence, chase remediation to closure, and keep the risk register accurate.
• Mature the Program: Improve questionnaires, tiering criteria, intake, and tooling as review volume grows—bringing patterns from third-party risk programs you’ve matured before.
• Report on Ecosystem Risk: Track assessment cycle times, backlog, open exceptions, and reassessment coverage, and report program health to stakeholders.
• Scale Through AI and Tooling: Build and scale AI-assisted workflows for assessment review, questionnaire analysis, and reporting—and share what works.

Kenntnisse

Vendor risk management

Security risk assessment

Cross-functional collaboration

AI tooling for throughput

Analytical documentation

Tools

OneTrust

ProcessUnity

Whistic

SecurityScorecard

Jobbeschreibung

Plaid is actively expanding its Security Governance, Risk, and Compliance function to manage third-party risk across the ecosystem. You will lead end-to-end vendor risk assessments, scrutinize customer and partner security postures, and keep the lifecycle current with rigorous remediation tracking.

We value strong analytical and documentation skills, with a focus on scalable, repeatable processes. The role emphasizes cross-functional collaboration and thoughtful use of AI to increase throughput