Senior TPRM Architect: AI & Vendor Security

DoorDash USA; Milwaukee (WI); On-site; USD 133,000 - 195,000; Full time

Benefits offered by this job

401(k) plan with employer matching

Paid parental leave

Wellness benefits

Commuter benefits match

Paid time off

Job summary

DoorDash USA is seeking a senior security-focused TPRM Analyst to lead the program and partner with security, procurement, privacy, and legal teams. You will own risk assessments, due diligence, and vendor onboarding for a fast-moving business.

You will design controls, build automations, and drive remediation across a global, compliance-driven environment with strong leadership exposure. Ideal candidates bring 7+ years in TPRM, cloud/SaaS risk experience, and proficiency with attestations like

Qualifications

• 7+ years in security-focused TPRM for a fast-growing company.
• Experience auditing controls, risk assessments, and remediation.
• Technical risk assessments of cloud, SaaS, AI solutions, and vendors.
• Ability to review CAIQ, SIG, SOC 2 Type 2 and similar attestations.
• Vetting complex vendor solutions with cloud-native services and AI.
• Experience with risk frameworks (NIST, ISO, SOC 2).
• Strong written and verbal communication to leadership.
• CISA/CISSP/CISM or similar is a plus.

Responsibilities

• Drive maturation of the TPRM program, making it proactive and strategic.
• Govern security strategy for BPO/contingent workers and audits.
• Design and implement process automations for scale.
• Lead Supplier Security AI Governance framework and AI risk reviews.
• Own governance reporting, risk dashboards, and leadership updates.
• Partner with security, procurement, privacy, and legal teams.
• Oversee end-to-end remediation tracking and issue closure.
• Execute core TPRM lifecycle with internal SMEs for scale.

Skills

TPRM program ownership

security risk assessments

vendor risk management

AI/ML risk assessment

security documentation review

cloud/SaaS risk evaluation

security controls & audits

complex vendor vetting

policy/framework enforcement

communication to leadership

team cross-functional collaboration

Education

Bachelor’s or Master’s in Information Security/CS/Business

Tools

CAIQ

SIG

SOC 2 Type 2

Penetration Tests

ISO 27001

PCI-DSS

Job description

DoorDash USA is seeking a senior security-focused TPRM Analyst to lead the program and partner with security, procurement, privacy, and legal teams. You will own risk assessments, due diligence, and vendor onboarding for a fast-moving business.

You will design controls, build automations, and drive remediation across a global, compliance-driven environment with strong leadership exposure. Ideal candidates bring 7+ years in TPRM, cloud/SaaS risk experience, and proficiency with attestations like