Senior Security Risk Manager - Data-Driven, Hybrid SF

Asana; San Francisco (CA); Hybrid; USD 194,000 - 220,000; Full time

Benefits offered by this job

Mental health, wellness & fitness benefits

Career coaching & support

Inclusive family building benefits

Long-term savings or retirement plans

In-office culinary options

Job summary

Asana is seeking a Security Risk Manager to own its internal security risk management program. This senior role requires building automated risk monitoring systems and developing quantitative risk frameworks to make informed decisions. Additionally, the role involves partnering with various departments to enhance risk awareness and reporting.

Applicants should have over 7 years of experience in information security, a strong grasp of risk methodologies, and excellent communication skills to translate complex risk concepts for all stakeholders.

Qualifications

• 7+ years of experience in information security focused on risk management.
• Demonstrated experience leading a security risk management program.
• Hands-on experience with risk scoring models and quantitative analysis.
• Ability to automate risk monitoring and build data pipelines.
• Proven skill in developing executive-level reporting.

Responsibilities

• Own Asana's internal security risk management program end-to-end.
• Design a quantitative risk framework to make data-driven decisions.
• Build and maintain a living risk register.
• Automate risk identification and monitoring through data integrations.
• Develop executive dashboards communicating security risk in business terms.

Skills

Information security expertise

Quantitative risk methodologies

Security frameworks

Cloud environments understanding

Communication skills

Job description

Asana is seeking a Security Risk Manager to own its internal security risk management program. This senior role requires building automated risk monitoring systems and developing quantitative risk frameworks to make informed decisions. Additionally, the role involves partnering with various departments to enhance risk awareness and reporting.

Applicants should have over 7 years of experience in information security, a strong grasp of risk methodologies, and excellent communication skills to translate complex risk concepts for all stakeholders.