Senior Security Analyst, Security Risk Management

Plaid

. Run end-to-end security risk assessments, including intake triage, scenario-based analysis, initial and residual risk scoring, treatment decisions, and monitoring .

Posted 10/12/2026full-timeUnited StatesSenior💰 $156,000 - $213,600 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in running end-to-end security risk assessments and integrating security risk into enterprise risk management. Proficient in preparing executive-level risk reporting and developing AI-driven automations to enhance risk program efficiency.

Highest-signal resume keywords

Security Risk AssessmentNIST SP 800-30Risk Management IntegrationAI Automation DevelopmentQuarterly Risk Reporting

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Scenario-Based AnalysisTechnical Risk AnalysisRisk Framework MaturationKey Risk IndicatorsFedRAMP 20x ExperienceNIST 800-53NIST CSFISO 27001SOC 2Risk Treatment Workflow

Soft Skills

Executive CommunicationCollaborationAnalytical Thinking

Industry Keywords

Enterprise Risk ManagementSecurity Decision RecordsPrivileged AccessSoftware Supply ChainProduct Abuse

Tech Stack

Tools & technologies

Cloud

About the role

Key responsibilities & impact

Run end-to-end security risk assessments, including intake triage, scenario-based analysis, initial and residual risk scoring, treatment decisions, and monitoring
Collaborate with engineering subject-matter experts and risk owners on risks involving privileged access, software supply chain, product abuse, and AI adoption
Prepare quarterly security risk reporting and security risk content for executive and board materials
Integrate security risk into enterprise risk management by mapping risks into the enterprise taxonomy, aligning rating scales, and synchronizing registers
Mature the risk framework, register, key risk indicators, and risk-owner self-service processes
Support FedRAMP 20x risk decisions and document risk explanations and senior-official acceptance in Security Decision Records
Build AI skills and automations for intake triage, first-draft risk analyses, register hygiene, and report generation, and share them with the team

Requirements

What you’ll need

Experience running scenario-based analyses of technical risks across cloud, IAM, software supply chain, application, and product domains using NIST SP 800-30, FAIR, or a comparable method
Technical depth to engage engineers on architecture and controls and distinguish real exposure from hypothetical exposure
Experience building or maturing a security risk program, including methodology, register, treatment and exception workflow, and key risk indicators
Experience integrating security risk into an enterprise risk management program
Experience preparing quarterly risk reporting and security risk content for executive and board decks
Ability to translate technical risk into a concise executive narrative
Working knowledge of NIST 800-53, NIST CSF, ISO 27001, and SOC 2
Experience building AI skills, agents, or automations that materially increase risk-program throughput
Hands-on FedRAMP 20x experience, including Security Decision Record reporting for rules and Key Security Indicators (nice to have)
Ability to work from the associated Plaid office at least 3 days per week
Must answer employment authorization and immigration sponsorship questions

Benefits

Comp & perks

Equity and/or commission may be provided depending on the position offered
Comprehensive medical, dental, and vision benefits
401(k) plan
Reasonable accommodations for candidates with disabilities
Hybrid work arrangement