Senior TPRM & AI Security Analyst

DoorDash; New York (NY); On-site; USD 132,600 - 195,000; Full time

Job summary

DoorDash is seeking a security‑minded Sr. Analyst for Third‑ Party Risk Management. You will own the TPRM lifecycle, drive risk assessments, and partner with security, procurement, privacy, and legal teams to strengthen the company’s vendor security posture.

You will lead the development of AI governance for third‑party tools, build scalable automations, and deliver risk dashboards to leadership for ongoing visibility into third‑party risk exposure.

Qualifications

• Experience owning or leading a TPRM program in a fast‑paced, high‑growth company.
• Strong background in security risk assessments, audits, and remediation management.
• Technical vetting of cloud/SaaS vendors, AI/ML risk, and API integrations.

Responsibilities

• Drive maturation of the TPRM program from reactive to proactive security partner.
• Architect security strategy for the BPO and contingent worker ecosystem.
• Design and implement process automations to scale the TPRM program.
• Lead AI governance framework for third‑party AI risks.
• Own core governance, metrics, and risk dashboards for leadership.
• Partner with security, procurement, privacy, and legal teams on risk assessments.
• Oversee end‑to‑end remediation tracking for findings and exceptions.
• Implement and refine the TPRM lifecycle with internal SMEs.

Skills

TPRM program ownership

Security strategy for BPO

Automation design

AI governance

Security dashboards

Cross-functional collaboration

Remediation tracking

Core TPRM lifecycle

Security audits & risk assessments

Cloud/SaaS risk assessments

APIs & cloud vendor risk

AI/ML risk analysis

NIST/ISO/SOC 2 frameworks

GRC program management

Vendor risk lifecycle

Effective communication

Security certifications (CISA/CISSP/C|

Education

Bachelor’s/master’s in Information Security or related field

Job description

DoorDash is seeking a security‑minded Sr. Analyst for Third‑ Party Risk Management. You will own the TPRM lifecycle, drive risk assessments, and partner with security, procurement, privacy, and legal teams to strengthen the company’s vendor security posture.

You will lead the development of AI governance for third‑party tools, build scalable automations, and deliver risk dashboards to leadership for ongoing visibility into third‑party risk exposure.