Remote Senior Analyst, TPRM & AI Security

DoorDash USA; United States; Hybrid; USD 132,600 - 195,000; Full time

Benefits offered by this job

401(k) plan

Parental leave (16 weeks)

Wellness benefits

Commuter benefits

Paid time off

Paid sick leave

Medical/dental/vision benefits

Job summary

DoorDash is seeking a Senior Analyst in Third-Party Risk Management (TPRM) to lead strategic risk programs across the U.S. and remote workforce.

You will drive maturation of the TPRM program, architect security strategies for the vendor ecosystem, and implement scalable automation to meet rapid business needs. This role demands deep expertise in security risk assessments, cloud/SaaS environments, AI risk, and cross-functional collaboration with security, procurement, legal, and privacy teams.

Qualifications

• 7+ years in security-focused TPRM for fast-growing companies.
• Bachelor’s or Master’s in Information Security, CS, or related field.
• Experience with audits, controls, risk assessments, and remediation management.
• Deep technical understanding of cloud/SaaS risks including AI solutions and infra vendors.
• Proficiency in reviewing security docs (CAIQ, SIG, SOC 2 Type 2, pen tests).
• Experience vetting complex vendor solutions, API integrations, cloud-native services, and AI platforms.
• Experience with frameworks (NIST, ISO, SOC 2) and cross-functional GRC programs.

Responsibilities

• Mature the TPRM program from reactive to proactive security partner.
• Architect security strategy for BPO/contingent worker ecosystem; implement robust controls.
• Design and build process automations to scale the TPRM program.
• Lead the Supplier Security AI Governance framework and assess AI risks.
• Establish core governance and centralized risk reporting for leadership.
• Partner with security, procurement, privacy, and legal to advise on risk.
• Own end-to-end remediation tracking and closure of findings.
• Execute core TPRM lifecycle and refine policies for scale.

Skills

TPRM program

Security risk assessments

Cloud risk

AI/ML risk

Vendor risk management

Audit & due diligence

Executive communication

Education

Bachelor's or Master’s in Information Security / CS

Tools

AWS

Azure

GCP

Job description

DoorDash is seeking a Senior Analyst in Third-Party Risk Management (TPRM) to lead strategic risk programs across the U.S. and remote workforce.

You will drive maturation of the TPRM program, architect security strategies for the vendor ecosystem, and implement scalable automation to meet rapid business needs. This role demands deep expertise in security risk assessments, cloud/SaaS environments, AI risk, and cross-functional collaboration with security, procurement, legal, and privacy teams.