Senior Third-Party Risk & AI Security Lead

DoorDash; United States; On-site; USD 132,600 - 195,000; Full time

Benefits offered by this job

Healthcare coverage

Generous PTO

Equity opportunities

Job summary

DoorDash is seeking a Sr. Analyst for Third-Party Risk Management in a security-focused role. You will own risk assessments, diligence, and onboarding for vendors, including AI and cloud-related suppliers.

You will partner with Security, Procurement, Legal, and Privacy to mature governance, deliver risk dashboards, and ensure scalable, proactive controls in a fast-paced, global environment.

Qualifications

• Experience with security and assurance audits, controls, and risk assessments.
• Ability to translate technical risk findings into business terms for leadership.
• Experience evaluating AI/ML risks and data provenance.
• Proficiency in reviewing security documentation (CAIQ, SIG, SOC 2).

Responsibilities

• Drive maturation of the TPRM program in a fast-growing company.
• Architect security strategy for our BPO and contingent worker ecosystem, from standards to controls.
• Design automations to scale the TPRM program.
• Lead the Supplier Security AI Governance framework for critical AI risks.
• Establish and own core program governance with dashboards for leadership.
• Partner with security, procurement, privacy, and legal to assess risk.
• Lead end-to-end remediation tracking and closure of findings.
• Execute core TPRM lifecycle including vendor onboarding and due diligence.

Skills

TPRM experience

Security governance

Vendor risk management

Security risk assessments

Audits & due diligence

Cross-functional collaboration

Executive communication

Certifications (CISA/CISSP/CISM)

Education

Bachelor’s or Master’s degree in Information Security, CS, Business Administration, or related field

Tools

CAIQ

SOC 2 Type 2

ISO 27001 / PCI-DSS

AWS/Azure/GCP

Job description

DoorDash is seeking a Sr. Analyst for Third-Party Risk Management in a security-focused role. You will own risk assessments, diligence, and onboarding for vendors, including AI and cloud-related suppliers.

You will partner with Security, Procurement, Legal, and Privacy to mature governance, deliver risk dashboards, and ensure scalable, proactive controls in a fast-paced, global environment.