Security Analyst, Third-Party Ecosystem Risk Management

Plaid

Confirmed live today High trust

Quick summary

Work type
On-site
Location
New York, NYSeattleRaleighSan Francisco, CA
Salary
$118,680–$175,800 / yr
Posted
76 days ago
Freshness
Confirmed live today

Market check

Salary context

Competitive pay

How this pay compares to similar roles

Similar $154k
This role $147k
$109k $197k
below market most similar roles pay here above market

This role pays less than 55% of similar roles. Most pay $122,275–$185,500 — the blue band above. At the midpoint, this role pays about $147k versus about $154k for comparable roles.

Based on 240 similar postings.

Employer

About Plaid

Plaid is a financial technology company that builds a data network powering digital finance applications, enabling consumers to securely connect their financial accounts to apps and services. Industry: Financial Technology & Data Infrastructure

Plaid currently has 73 open roles on FindRole.

Listed pay typically runs $190,800–$262,800 across 73 roles with salary data.

Most-posted roles

View all roles at Plaid

At a glance

TL;DR · Security Analyst, Third-Party Ecosystem Risk Management

Security Analyst, Third-Party Ecosystem Risk Management joins the Security Governance, Risk, and Compliance team to manage information security risks and maintain effective controls. This role involves running end-to-end security risk assessments for vendors, customers, and partners, including reviewing questionnaires, SOC 2 reports, and ISO documentation to determine defensible risk ratings. Key responsibilities include managing the third-party risk lifecycle, tracking remediation, and maturing program components like tiering criteria and runbooks. The candidate must possess knowledge of NIST CSF, ISO 27001, and SOC 2 while demonstrating the ability to use AI tooling to increase assessment throughput. The work focuses on vetting the security posture of the broader ecosystem to ensure that all connected entities meet established security bars before accessing sensitive data.

What you'll do

  • Run end-to-end security risk assessments for third-party vendors, including intake, questionnaire review, and risk rating.
  • Evaluate the security posture of customers and partners onboarding to the platform to ensure they meet security standards.
  • Manage the third-party risk lifecycle by maintaining risk tiering, reassessment cadences, and remediation tracking.
  • Improve program maturity by refining questionnaires, tiering criteria, runbooks, and intake processes for better scalability.
  • Report on ecosystem risk metrics, including assessment cycle times and backlog status, to cross-functional stakeholders.
  • Build and scale AI-assisted workflows to increase throughput for assessment reviews and questionnaire analysis.

What we're looking for

  • 4+ years of experience in vendor risk management.
  • Experience running security risk assessments of third parties, including reviewing questionnaires, SOC 2, ISO reports, and security documentation.
  • Familiarity with the third-party risk lifecycle including intake, tiering, exceptions, remediation tracking, and periodic reassessment.
  • Working knowledge of SOC 2, ISO 27001, NIST CSF, and common control domains like access control and encryption.
  • Experience maturing a third-party or vendor risk program by improving tiering criteria, questionnaires, workflows, and automation.
  • Demonstrated ability to apply AI tooling to assessment review, questionnaire analysis, and reporting to increase throughput.
  • Clear written and verbal communication skills to explain security risks to non-security stakeholders like Legal and Procurement.
  • A third-party-risk or audit credential (CTPRP, CISA, or CISSP), or hands-on ownership of a TPRM platform (preferred).

More like this

Similar roles

Senior Security Analyst, Security Risk Management

Plaid

Seattle +3 15 days ago $156,000–$213,600
Security Risk Assessment NIST SP 800-30 FAIR NIST 800-53 NIST CSF ISO 27001 SOC 2 FedRAMP Enterprise Risk Management IAM Software Supply Chain AI Automation Security Decision Record Key Risk Indicators

Lead Analyst, Third Party Security

Circle

Remote (San Francisco, CA) 31 days ago $140,000–$185,000
Cloud Security API Security Network Architecture Identity and Access Management Cryptography AI GenAI Automation Blockchain Smart Contracts SOC 2 ISO 27001 DORA Cybersecurity Digital Assets
7+ yrs exp Remote

Senior Vulnerability Management Analyst

Nvidia

Remote (CA) +2 6 days ago $160,000–$258,750
Vulnerability Management Security Development Lifecycle (SDL) CVSS CWE SBOM VEX CSAF Threat Modeling Agile Unit Testing AI Systems Responsible Disclosure Bug Bounty Management
6+ yrs exp Remote

Information Security Risk Analyst

Lam Research

Tualatin, OR 103 days ago
SIEM KQL SPL SQL Python PowerShell Microsoft Sentinel Splunk Exabeam Securonix Microsoft Defender XDR Azure AWS Google Cloud UEBA MITRE ATT&CK STIX/TAXII MISP Logic Apps Incident Response Threat Hunting
Hybrid

Systems Security Analyst

Leidos

San Antonio, TX 6 days ago $69,550–$125,725
Cybersecurity IPsec AES GRE IKE MD5 SHA 3DES PKI TCP/IP OSI Model ITIL Firewalls Encryption cloud-security Agile Configuration Management Change Management release-management
3+ yrs exp

Threat Assurance Analyst

State Street

Quincy, MA 88 days ago
MITRE ATT&CK Python SQL Power BI Cyber Threat Intelligence SIEM EDR DLP Proxy Penetration Testing Data Analytics AI-assisted workflows SOC
3+ yrs exp