Senior TPRM Analyst: AI Security & Governance

DoorDash; Austin (TX); On-site; USD 132,600 - 195,000; Full time

Benefits offered by this job

401(k) match

Paid parental leave

Wellness benefits

Commuter benefits match

PTO & sick leave

Medical, dental, vision

Job summary

DoorDash is seeking a Sr. Analyst for Third-Party Risk Management within the Global Governance, Risk, and Compliance team. This role will own risk assessments, due diligence, and contract reviews for vendors, focusing on AI, cloud, and security controls to protect data and resilience.

The role emphasizes proactive security partnerships, cross-functional collaboration with security, procurement, privacy, and legal, and scalable program governance across a global, high‑growth environment.

Qualifications

• 7+ years of security-focused TPRM experience in fast-paced environments.
• Bachelor’s or Master’s degree in Information Security, CS, Business Administration, or related field.
• Experience building, auditing, and remediating vendor risk and security controls.
• Deep technical understanding of cloud/SaaS security and AI risk.
• Proficiency in reviewing core security documents: CAIQ, SIG, SOC 2 Type 2, and attestations.

Responsibilities

• Own end-to-end TPRM lifecycle: risk assessments, due diligence, onboarding, and contract reviews.
• Lead security partnerships with procurement, privacy, and legal to scale the program.
• Develop and monitor metrics, dashboards, and governance for leadership visibility.
• Evaluate AI risks and vendor AI platforms for data protection and resilience.
• Drive process automations to scale the TPRM program across the business.

Skills

TPRM program ownership

Security risk assessments

Audit & due diligence

AI/ML risk knowledge

Vendor risk management

Communications & reporting

Cloud security (AWS/Azure/GCP)

Education

Bachelor's or Master's in Information Security / CS / Business Administration

Tools

CAIQ

SIG

SOC 2 Type 2

Penetration Test reports

ISO 27001

PCI-DSS

Job description

DoorDash is seeking a Sr. Analyst for Third-Party Risk Management within the Global Governance, Risk, and Compliance team. This role will own risk assessments, due diligence, and contract reviews for vendors, focusing on AI, cloud, and security controls to protect data and resilience.

The role emphasizes proactive security partnerships, cross-functional collaboration with security, procurement, privacy, and legal, and scalable program governance across a global, high‑growth environment.