Senior Security Risk Analyst, GRC

Posted 2hrs ago

Employment Information

Industry
Education
Salary
Experience
Job Type

Report this job

Job expired or something wrong with this job?

Job Description

Senior Security Risk Analyst managing security risk, controls, and GRC reporting for DoorDash’s technology and logistics marketplace. Automating risk workflows and shaping proactive risk management.

Responsibilities:

  • Lead the global risk management process, including risk assessment and treatment planning
  • Negotiate treatment plans with risk and control owners
  • Translate regulatory and framework changes into working controls
  • Analyze day-to-day control operation and threat intelligence
  • Manage policy exceptions through compensatory controls or risk acceptance cases
  • Own risk reporting for security or engineering areas
  • Serve as a key risk contact and help reduce risk measurably
  • Collaborate and report within GRC and security teams and across the business
  • Build automations and help shape team strategy and tooling
  • Run risk assessments and reporting
  • Support exception requests
  • Help automate tooling and processes for an accurate risk register
  • Deep-dive into business controls, identify issues, and proactively address risks
  • Report to the Senior Security Risk Manager on the GRC team in the Security organization

Requirements:

  • 4+ years of experience in security risk, GRC, or a related field
  • Bachelor's degree in a technology-related field, or an additional 4 years of work experience in a technology-related field
  • Fluency in risk management frameworks, including the NIST Cybersecurity Framework (CSF)
  • Ability to translate technical risk for technical and non-technical audiences
  • Strong written and verbal communication skills
  • Ability to turn complex control requirements into clear, actionable guidance
  • Experience owning risk metrics and reporting
  • Experience automating workflows, or interest in agentic AI workflows
  • Experience implementing or using GRC tooling (nice to have)
  • Experience with AI-related risk (nice to have)
  • Experience in controls assurance and effectiveness testing (nice to have)

Benefits:

  • Equity grants
  • 401(k) plan with employer matching
  • 16 weeks of paid parental leave
  • Wellness benefits
  • Commuter benefits match
  • Paid time off
  • Paid sick leave
  • Medical, dental, and vision benefits
  • 11 paid holidays
  • Disability insurance
  • Basic life insurance
  • Family-forming assistance
  • Mental health program
  • Flexible paid time off/vacation for salaried roles
  • 80 hours of paid sick time per year for salaried roles
  • Wellness expense reimbursement
  • Premium healthcare