Senior Security Risk Analyst — ERM & AI Automation

Plaid; United States; Remote; USD 140,000 - 200,000; Full time

Benefits offered by this job

Equity compensation

Benefits package (medical/dental/vison

Job summary

Plaid is seeking a Security Risk Manager to run end-to-end risk assessments within the company’s risk management program. You will collaborate with engineering SMEs to evaluate risks from cloud to product abuse, producing defensible risk acceptances and mitigations.

You’ll craft quarterly risk reporting, integrate security risk into enterprise risk management, and mature the program as it scales with AI-driven automation. This role partners with leadership to reduce risk across the org.

Qualifications

• Experience running scenario-based analyses of technical risks (cloud, IAM, software supply chain, application and product).
• Experience maturing security risk programs — methodology, registers, workflows, KPIs.
• Experience turning technical risk into concise executive narrative for boards.
• Knowledge of NIST 800-53, NIST CSF, ISO 27001, SOC 2 and how risk feeds them.
• Power user of AI/tools to automate risk processes and share learnings.

Responsibilities

• Run Security Risk Assessments: triage intake, run scenario analyses, score risks, drive treatment decisions.
• Build quarterly risk reporting for executive and board decks.
• Integrate Security Risk into ERM alongside business risk.
• Mature the program and expand scope with KPI gauges.
• Scale via AI and automation to increase throughput.
• Support FedRAMP 20x risk decisions with documented explanations.

Skills

Security risk assessments

ERM integration

Risk reporting

Security compliance knowledge

AI fluency & automation

Job description

Plaid is seeking a Security Risk Manager to run end-to-end risk assessments within the company’s risk management program. You will collaborate with engineering SMEs to evaluate risks from cloud to product abuse, producing defensible risk acceptances and mitigations.

You’ll craft quarterly risk reporting, integrate security risk into enterprise risk management, and mature the program as it scales with AI-driven automation. This role partners with leadership to reduce risk across the org.