Senior Third-Party Risk & AI Security Analyst

Doordashusa; Milwaukee (WI); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

401(k) with employer matching

Paid parental leave (16 weeks)

Health, dental, and vision benefits

Paid time off

Job summary

DoorDash is seeking a technically focused Sr. Analyst for Third-Party Risk Management within the Global Governance, Risk, and Compliance (GRC) team. You will own and mature the TPRM program, govern security for the BPO/contingent worker ecosystem, and design automations to scale processes.

You will work with security, procurement, privacy, and legal to drive risk transparency and remediation. The role requires 7+ years in security-focused TPRM, strong auditing and risk assessment experience, and

Qualifications

• 7+ years in security-focused TPRM for fast-growth companies.
• Bachelor’s or Master’s degree in Information Security or related field.
• Experience with security audits, controls, risk assessments, remediation management.
• Deep technical knowledge of cloud/SaaS security incl. AI solutions and APIs.
• Familiar with CAIQ, SIG, SOC 2 Type 2, ISO 27001, PCI-DSS attestations.

Responsibilities

• Drive the continuous maturation of the TPRM program and make it proactive.
• Architect security strategy for BPO and contingent workers ecosystem.
• Design and build process automations to scale the TPRM program.
• Lead Supplier Security AI Governance framework and risk evaluation.
• Own governance and reporting with metrics and dashboards for leadership.
• Partner with security, procurement, privacy, and legal teams for risk advice.
• Lead end-to-end remediation tracking for findings and exceptions.
• Execute the core TPRM lifecycle including due diligence and onboarding.

Skills

TPRM

Security governance

Audits & risk assessments

Vendor risk management

Cloud security

AI security risk

ISO 27001 / SOC2

Communication

Education

Bachelor’s or Master’s in Information Security / CS / Business Admin

Tools

CAIQ

SIG

SOC 2 Type 2

Penetration Test Reports

ISO 27001

PCI-DSS

AWS/Azure/GCP security

Job description

DoorDash is seeking a technically focused Sr. Analyst for Third-Party Risk Management within the Global Governance, Risk, and Compliance (GRC) team. You will own and mature the TPRM program, govern security for the BPO/contingent worker ecosystem, and design automations to scale processes.

You will work with security, procurement, privacy, and legal to drive risk transparency and remediation. The role requires 7+ years in security-focused TPRM, strong auditing and risk assessment experience, and