Senior Security Risk Analyst - AI-Driven GRC Reporting

Cybersecurity Jobs; Seattle (WA); Hybrid; USD 156,000 - 214,000; Full time

Benefits offered by this job

Medical, Dental, Vision

401(k)

Equity/Commission

Job summary

Plaid is hiring a Senior Security Analyst to strengthen security risk management within the GRC program. This role runs end-to-end risk assessments and turns findings into clear reporting for leadership and the board.

As part of the GRC team, you will reduce risk through a robust assurance approach, partnering across the company to keep Plaid secure, resilient, and aligned with industry and regulatory expectations. Hybrid Seattle location.

Qualifications

• Experience running scenario-based analyses of technical risks using NIST SP 800-30, FAIR, or similar methods.
• Ability to translate risk into concise executive narrative for leadership and board.
• Experience maturing a security risk program with methodology, risk register, and indicators.
• Proven track record integrating security risk into enterprise risk management.
• Experience presenting quarterly risk reports for executives and board decks.
• Strong knowledge of NIST 800-53, NIST CSF, ISO 27001, SOC 2.
• Hands-on FedRAMP 20x with SDR reporting.

Responsibilities

• Run end-to-end security risk assessments within Plaid's risk management program.
• Collaborate with engineering SMEs and risk owners on identified risks.
• Build quarterly risk reports and content for leadership and board materials.
• Integrate security risk into the enterprise risk management program.
• Support program maturity and automate parts of the workflow as an AI power user.
• Triaging intake, scoring risks, and driving documented treatment decisions.
• Prepare Security Risk Review updates and executive/deck content.
• Map security risks into the enterprise taxonomy and align risk registers.
• Help evolve the risk framework, registers, KPIs, and owner self-service.
• Ensure unmet FedRAMP/KSI gaps have documented risk explanations and approvals.
• Develop AI skills and automations for risk analyses and report generation.

Skills

Risk assessment

Executive storytelling

Enterprise risk management

AI automation

Federally compliant risk experience

Education

Bachelor level preferred

Tools

NIST SP 800-30

NIST 800-53

NIST CSF

ISO 27001

SOC 2

FedRAMP 20x

Security Decision Record (SDR)

Job description

Plaid is hiring a Senior Security Analyst to strengthen security risk management within the GRC program. This role runs end-to-end risk assessments and turns findings into clear reporting for leadership and the board.

As part of the GRC team, you will reduce risk through a robust assurance approach, partnering across the company to keep Plaid secure, resilient, and aligned with industry and regulatory expectations. Hybrid Seattle location.