Senior Analyst, Third-Party Risk & AI Governance

DoorDash; Milwaukee (WI); On-site; USD 132,600 - 195,000; Full time

Benefits offered by this job

401(k) plan with employer matching

Paid parental leave

Wellness benefits

Commuter benefits match

Paid time off & sick leave

Medical/dental/vision benefits

11 paid holidays

Disability and life insurance

Family‑forming assistance

Job summary

DoorDash is seeking a security‑focused Sr. Analyst in Milwaukee, WI to lead and mature the Third-Party Risk Management program within the Global Governance, Risk, and Compliance team.

You will drive security partnerships with vendors, AI risk governance, and cross‑functional collaboration across security, procurement, privacy, and legal. You will manage risk assessments, due diligence, onboarding, and contract reviews while scaling processes to support rapid business needs and ensuring

Qualifications

• 7+ years of security-focused TPRM experience in a fast-paced, high-growth company.
• Bachelor’s or Master’s degree in Information Security, Computer Science, Business Administration, or related field.
• Experience with security and assurance audits, controls, and risk assessments, and remediation management.
• Deep technical understanding of risk assessments of cloud, SaaS, including AI solutions, and vendor risk.
• Prof. of security documentation: CAIQ, SIG, SOC 2 Type 2, Penetration Test reports, ISO 27001, PCI-DSS attestations.
• Experience vetting complex vendor solutions, API integrations, cloud services, and AI platforms for vulnerabilities.

Responsibilities

• Drive maturation of the TPRM program into a proactive security partnership.
• Architect and govern security strategy for the BPO and contingent workforce ecosystem.
• Design and build automations to scale the TPRM program.
• Lead the Supplier Security AI Governance framework and evaluate AI risks.
• Establish core governance and centralized reporting for leadership visibility.
• Collaborate with security engineering, procurement, privacy, and legal teams.
• Lead end-to-end remediation tracking and closure of findings.
• Execute core TPRM lifecycle and coordinate with internal SMEs to refine policies.

Skills

TPRM program leadership

security risk assessments

vendor risk management

cloud/SaaS security

AI/ML risk assessment

security frameworks (NIST ISO SOC2)

security documentation review (CAIQ/SI

Education

Bachelor’s or Master’s degree in Information Security, Computer Science, Business Administration, or related field

Tools

AWS

Azure

GCP

Job description

DoorDash is seeking a security‑focused Sr. Analyst in Milwaukee, WI to lead and mature the Third-Party Risk Management program within the Global Governance, Risk, and Compliance team.

You will drive security partnerships with vendors, AI risk governance, and cross‑functional collaboration across security, procurement, privacy, and legal. You will manage risk assessments, due diligence, onboarding, and contract reviews while scaling processes to support rapid business needs and ensuring