AI‑Powered Third-Party Risk Analyst

Plaid; North Carolina; On-site; USD 119,000 - 176,000; Full time

Benefits offered by this job

Equity

401(k) plan

Medical benefits

Dental benefits

Vision benefits

Job summary

Plaid is actively expanding its Security Governance, Risk, and Compliance function to manage third-party risk across the ecosystem. You will lead end-to-end vendor risk assessments, scrutinize customer and partner security postures, and keep the lifecycle current with rigorous remediation tracking.

We value strong analytical and documentation skills, with a focus on scalable, repeatable processes. The role emphasizes cross-functional collaboration and thoughtful use of AI to increase throughput

Qualifications

• 4+ years of vendor risk management experience.
• Experience running security risk assessments of third parties—and translating findings into defensible risk ratings.
• Familiarity with SOC 2, ISO 27001, NIST CSF, and control domains.
• Experience maturing a third-party risk program with scalable processes.
• Strong written and verbal communication across Security, Legal, Procurement, and GTM.

Responsibilities

• Run Vendor Security Risk Assessments: Triage inbound vendor requests, run security reviews scaled to risk tier, rate the risk, and document findings and exceptions.
• Vet Customer and Partner Security Posture: Review the security practices of customers and partners onboarding to the platform, applying the same standards you use for vendors.
• Keep the Third-Party Risk Lifecycle Current: Maintain risk tiering, drive reassessments on cadence, chase remediation to closure, and keep the risk register accurate.
• Mature the Program: Improve questionnaires, tiering criteria, intake, and tooling as review volume grows—bringing patterns from third-party risk programs you’ve matured before.
• Report on Ecosystem Risk: Track assessment cycle times, backlog, open exceptions, and reassessment coverage, and report program health to stakeholders.
• Scale Through AI and Tooling: Build and scale AI-assisted workflows for assessment review, questionnaire analysis, and reporting—and share what works.

Skills

Vendor risk management

Security risk assessment

Cross-functional collaboration

AI tooling for throughput

Analytical documentation

Tools

OneTrust

ProcessUnity

Whistic

SecurityScorecard

Job description

Plaid is actively expanding its Security Governance, Risk, and Compliance function to manage third-party risk across the ecosystem. You will lead end-to-end vendor risk assessments, scrutinize customer and partner security postures, and keep the lifecycle current with rigorous remediation tracking.

We value strong analytical and documentation skills, with a focus on scalable, repeatable processes. The role emphasizes cross-functional collaboration and thoughtful use of AI to increase throughput