Senior TPRM Security Analyst

DoorDash; Chicago (IL); On-site; USD 132,600 - 195,000; Full time

Benefits offered by this job

401(k) matching

Paid parental leave

Wellness benefits

Commuter benefits

Paid time off

Sick leave

Medical/dental/vision

Job summary

DoorDash is seeking a senior analyst to drive third‑party risk management across a fast‑growing, global operation. You will own the TPRM lifecycle, assess AI and cloud vendors, and build scalable governance with cross‑functional teams including security, procurement, privacy, and legal.

The role emphasizes proactive security partnerships, continuous improvement, and leadership reporting on risk exposure to executive leadership. A strong background in governance frameworks and audits is essential.

Qualifications

• Bachelor's or Master's in Information Security, Computer Science, Business Administration, or related field.
• Experience building and auditing security controls, risk assessments, and remediation programs.
• Technical vetting of cloud/SaaS vendors, AI platforms, and API integrations.

Responsibilities

• Drive the maturation of the TPRM program from reactive to proactive security partnership.
• Architect security strategy for the BPO and contingent workforce ecosystem; implement and monitor controls.
• Design and automate processes to scale the TPRM program with business priorities.
• Lead the AI governance framework to evaluate third‑party AI risks across the business.
• Own governance reporting, dashboards, and leadership updates on third‑party risk exposure.
• Partner with security engineering, procurement, privacy, and legal to provide security guidance.
• Manage end‑to‑end remediation tracking and ensure timely closure of findings.
• Execute the core TPRM lifecycle including risk assessments and vendor onboarding.

Skills

TPRM experience

Security governance

Cloud risk assessments

Executive communication

Education

Info Security degree

Tools

CAIQ/SIG/SOC2

Job description

DoorDash is seeking a senior analyst to drive third‑party risk management across a fast‑growing, global operation. You will own the TPRM lifecycle, assess AI and cloud vendors, and build scalable governance with cross‑functional teams including security, procurement, privacy, and legal.

The role emphasizes proactive security partnerships, continuous improvement, and leadership reporting on risk exposure to executive leadership. A strong background in governance frameworks and audits is essential.