Senior Security Analyst, Security Risk Management

The role

You will run end-to-end security risk assessments including intake, scenario-based analysis, and monitoring. You will build quarterly risk reporting for leadership and the board and integrate security risk into enterprise risk management.

What you will do

• Run Security Risk Assessments including triage, scenario-based analysis, and driving treatment decisions.
• Build Quarterly Risk Reporting for executive and board decks.
• Integrate Security Risk into ERM by partnering with enterprise risk stakeholders.
• Mature the Program by evolving the risk framework, register, and key risk indicators.
• Support FedRAMP 20x Risk Decisions through documented risk explanations and senior-official acceptance.
• Scale Through AI and Automation by building AI skills and automations for risk-program tasks.

Required qualifications

• Experience running scenario-based analyses of technical risks using NIST SP 800-30, FAIR, or a comparable method.
• Technical depth to engage engineers on architecture and controls.
• Experience building or maturing a security risk program.
• Experience integrating security risk into an enterprise risk management program.
• Experience preparing quarterly risk reporting and building security risk content for executive and board decks.
• Ability to turn technical risk into a concise executive narrative.
• Working knowledge of NIST 800-53, NIST CSF, ISO 27001, and SOC 2.
• AI fluency and tooling as a power user who has built AI skills, agents, or automations.

Nice to have

• Hands-on FedRAMP 20x experience, including Security Decision Record reporting for rules and Key Security Indicators (SDR-CSO-FRR, SDR-CSX-KSI).

Benefits

• Medical
• Dental
• Vision
• 401(k)

About the company

Plaid builds tools and experiences that thousands of developers use to create products. The company's network covers 12,000 financial institutions across the US, Canada, UK and Europe.