Senior Analyst, Third-Party Risk Management – TPRM
Posted 8ds ago
Employment Information
Job Description
Senior Analyst for Third-Party Risk Management at DoorDash. Collaborating with security teams to enhance third-party risk posture and governance.
Responsibilities:
- Drive the continuous maturation of the TPRM program
- Architect and govern the security strategy for BPO and contingent worker ecosystem
- Pioneer and lead the Supplier Security AI Governance framework
- Establish and own core program governance and build a centralized reporting function
- Lead the end-to-end issues and remediation tracking process
- Execute the core TPRM lifecycle
- Maintain TPRM tools, artifacts, and reporting capabilities
- Partner with risk domain SMEs to enhance vendor risk management policy
Requirements:
- 7+ years of progressive experience in security-focused TPRM methodologies
- Bachelor’s or Master’s degree in Information Security, Computer Science, Business Administration, or related field
- Experience with program building, conducting security and/or assurance audits
- Deep technical understanding and experience conducting comprehensive security risk assessments
- Proficiency in the technical review of core security assurance documentation
- Experience in the technical vetting of complex vendor solutions
- Practical experience in assessing the unique risks associated with AI/ML models
- Experience with implementing major information security, privacy, and risk management frameworks
- Experience managing security and compliance programs in a global company environment
- Excellent verbal and written communication skills
- CISA, CISSP, CISM or other industry certifications are a plus
Benefits:
- 401(k) plan with employer matching
- 16 weeks of paid parental leave
- Wellness benefits
- Commuter benefits match
- Paid time off and paid sick leave
- Medical, dental, and vision benefits
- 11 paid holidays
- Disability and basic life insurance
- Family-forming assistance
- Mental health program


















