Manager, Third-Party Risk Management (TPRM)

The role

You will lead a global third-party risk management program and shape its AI-native future. You will own the vendor security risk lifecycle, manage TPRM analysts, and build agentic workflows to improve risk assessment and remediation.

What you will do

• Run day-to-day TPRM program operations from discovery through exit
• Lead assessments of vendors connected to crown jewel systems
• Turn findings into accountable risk decisions and mitigation plans
• Set the vision and build a roadmap for an AI-native TPRM function
• Build and pilot agentic workflows to gather and reconcile evidence
• Own the TPRM framework for third-party AI and agentic services
• Hire, coach, and directly manage TPRM professionals and US-based GRC direct reports
• Provide US-hours GRC coverage and escalation support
• Report critical-system exposure and program performance to leadership and auditors

Required qualifications

• 6+ years of progressive experience in technical third-party risk, security risk, or security engineering
• Substantial hands-on experience leading complex vendor assessments and ownership of a TPRM program
• Experience leading distributed teams and coordinating delivery across different GRC specialties
• Deep experience assessing enterprise integrations including SAML/OIDC, OAuth, SCIM, APIs, cloud IAM, and data flows
• Strong assurance and control-testing skills including SOC 2 Type II, ISO 27001, or PCI DSS
• AI-native working approach with experience building or piloting AI-assisted workflows
• Experience implementing or improving TPRM/GRC platforms and workflow automation
• Hands-on knowledge of cloud and SaaS security, privileged supplier access, data protection, incident response, and recovery
• Sound judgment and executive communication

Nice to have

• Python
• SQL
• low-code orchestration
• production-scale agentic experience

Benefits

• 401(k) plan with employer matching
• 16 weeks of paid parental leave
• Wellness benefits
• Commuter benefits match
• Paid time off
• Paid sick leave
• Medical, dental, and vision benefits
• 11 paid holidays
• Disability and basic life insurance
• Family-forming assistance
• Mental health program

Before you apply

• DoorDash utilizes an automated recruitment tool called Metaview to evaluate job related qualifications and characteristics

About the company

DoorDash is a technology and logistics company that started by enabling door-to-door delivery. The company is growing rapidly and aims to become a place people turn to for any and all goods.