Senior TPRM Analyst: AI & Supplier Security

DoorDash; Phoenix (AZ); On-site; USD 132,600 - 195,000; Full time

Benefits offered by this job

401(k) plan with employer matching

Paid parental leave

Wellness benefits

Commuter benefits match

Medical, dental, and vision benefits

11 paid holidays

Job summary

DoorDash is seeking a security‑focused Senior Analyst to own and mature the Third‑Party Risk Management program within a fast‑moving, global security team. You will lead risk assessments, due diligence, vendor reviews, and AI governance for the BPO and contingent worker ecosystem.

You will collaborate across security engineering, procurement, privacy, and legal teams to implement robust controls, automate processes, and provide actionable risk reporting to leadership.

Qualifications

• 7+ years in security-focused TPRM for fast‑paced, high‑growth company.
• Bachelor’s or Master’s degree in Information Security, CS, Business Administration, or related field.
• Experience with program building, conducting security/assurance audits, controls and risk assessments, and remediation management.
• Deep technical understanding and experience with risk assessments of cloud, SaaS, including AI solutions, and infrastructure vendors.
• Proficiency in reviewing security assurance docs (CAIQ, SIG, SOC 2 Type 2, Pen tests, ISO 27001, PCI-DSS).
• Experience vetting complex vendor solutions, API integrations, cloud security, and AI platforms for risks.

Responsibilities

• Drive the maturation of the TPRM program from reactive to proactive security partnership.
• Architect and govern security strategy for BPO and contingent workers ecosystem.
• Design and build automations to scale the TPRM program.
• Lead the Supplier Security AI Governance framework.
• Own governance reporting with risk dashboards and leadership updates.
• Provide security advisory across cross-functional teams (security eng, procurement, privacy, legal).
• Lead remediation tracking and closure of findings from assessments.
• Execute core TPRM lifecycle (risk assessments, DDQs, onboarding, vendor reviews).

Skills

TPRM leadership

Risk assessments

Due diligence

Audit coordination

AI risk assessment

Cloud security

Security frameworks

Vendor management

Communication skills

Education

Bachelor’s or Master’s degree in InfoSec/CS

Tools

CAIQ

SIG

SOC 2 Type 2

Penetration tests

ISO 27001

PCI-DSS

Job description

DoorDash is seeking a security‑focused Senior Analyst to own and mature the Third‑Party Risk Management program within a fast‑moving, global security team. You will lead risk assessments, due diligence, vendor reviews, and AI governance for the BPO and contingent worker ecosystem.

You will collaborate across security engineering, procurement, privacy, and legal teams to implement robust controls, automate processes, and provide actionable risk reporting to leadership.