Senior Security Risk Manager, GRC & Automation

Plaid Inc.; Seattle (WA); Sur place; USD 150 000 - 230 000; Plein temps

Résumé du poste

Plaid Inc. is actively seeking a Security Risk professional to lead end-to-end risk assessments, coordinate cross‑functional risk analyses with engineering SMEs, and drive secure risk decisions.

You will build quarterly risk reporting for leadership and integrate risk into enterprise risk management, maturing the program as it scales with AI-enabled automation. The role focuses on managing security risks across cloud, supply chain, and product areas, ensuring accurate risk characterization and

Qualifications

• Experience running scenario-based analyses of technical risks (cloud, IAM, software supply chain, app) using NIST SP 800-30, FAIR, or similar.
• Experience building or maturing security risk programs (methodology, register, workflow, indicators).
• Experience turning technical risk into concise executive narratives for boards and leadership.

Responsabilités

• Run Security Risk Assessments end-to-end across risk domains and drive documented treatment decisions.
• Build quarterly risk reporting for executive and board decks; track material risks.
• Integrate security risk into ERM and map to enterprise taxonomy and rating scales.
• Mature the program with framework improvements, indicators, and owner self-service.
• Support FedRAMP risk decisions with documented explanations and senior acceptance.
• Scale risk work with AI automation for intake, analyses, and reporting.

Connaissances

Security risk assessment

Risk program maturity

Risk reporting

Security & compliance knowledge

AI fluency & tooling

Description du poste

Plaid Inc. is actively seeking a Security Risk professional to lead end-to-end risk assessments, coordinate cross‑functional risk analyses with engineering SMEs, and drive secure risk decisions.

You will build quarterly risk reporting for leadership and integrate risk into enterprise risk management, maturing the program as it scales with AI-enabled automation. The role focuses on managing security risks across cloud, supply chain, and product areas, ensuring accurate risk characterization and