Senior Security Analyst, Security Risk Management

Plaid

Confirmed live today High trust

Quick summary

Work type
On-site
Location
SeattleRaleighSan Francisco, CANew York, NY
Salary
$156,000–$213,600 / yr
Posted
15 days ago
Freshness
Confirmed live today

Market check

Salary context

Competitive pay

How this pay compares to similar roles

Similar $180k
This role $185k
$122k $230k
below market most similar roles pay here above market

This role pays more than 58% of similar roles. Most pay $143,150–$216,000 — the blue band above. At the midpoint, this role pays about $185k versus about $180k for comparable roles.

Based on 240 similar postings.

Employer

About Plaid

Plaid is a financial technology company that builds a data network powering digital finance applications, enabling consumers to securely connect their financial accounts to apps and services. Industry: Financial Technology & Data Infrastructure

Plaid currently has 73 open roles on FindRole.

Listed pay typically runs $190,800–$262,800 across 73 roles with salary data.

Most-posted roles

View all roles at Plaid

At a glance

TL;DR · Senior Security Analyst, Security Risk Management

The Senior Security Analyst, Security Risk Management joins the Security Governance, Risk, and Compliance team to proactively manage information security risks and maintain effective controls. You will run end-to-end security risk assessments, performing scenario-based analyses on infrastructure, product, and supply-chain risks while driving documented treatment decisions with engineering SMEs. Key responsibilities include building quarterly security risk reporting for executive and board materials, integrating security risk into the enterprise risk management taxonomy, and maturing the risk framework. You will utilize NIST SP 800-30, FAIR, NIST 800-53, NIST CSF, ISO 27001, and SOC 2 standards to evaluate technical exposures. Additionally, you will act as an AI power user to automate intake triage and report generation while supporting FedRAMP 20x risk decisions and security decision records.

What you'll do

  • Run end-to-end security risk assessments including intake, scenario-based analysis, and treatment decisions.
  • Collaborate with engineering SMEs to identify and score risks related to infrastructure, supply chain, and product abuse.
  • Build quarterly security risk reports and develop content for executive and board-level presentations.
  • Integrate security risk into the enterprise risk management taxonomy and align rating scales.
  • Evolve the risk framework, registers, and key risk indicators to mature the security program.
  • Document risk explanations and senior-official acceptances for FedRAMP rules and gaps.
  • Build AI-driven automations for risk intake triage, register hygiene, and report generation.

What we're looking for

  • Experience running scenario-based analyses of technical risks using NIST SP 800-30, FAIR, or comparable methods.
  • Technical depth to engage engineers on architecture, controls, and distinguishing real exposures from hypothetical ones.
  • Experience building or maturing a security risk program including methodology, registers, treatment workflows, and key risk indicators.
  • Experience integrating security risk into an enterprise risk management program.
  • Experience preparing quarterly risk reporting and building security risk content for executive and board decks.
  • Ability to translate technical risk into a concise executive narrative.
  • Working knowledge of NIST 800-53, NIST CSF, ISO 27001, and SOC 2.
  • Power user experience building AI skills, agents, or automations to increase risk-program throughput.
  • Hands-on FedRAMP 20x experience, including Security Decision Record reporting (preferred).

More like this

Similar roles

Senior Security Engineer, Strategic Risk

Apple Inc

Seattle, WA 10 days ago $175,000–$308,500
Threat Modeling Incident Response AI ML Cryptography Access Control Splunk OSQuery Cloud-Native Architecture Security Engineering Threat Hunting Authentication Frameworks Security Reviews
7+ yrs exp

Security Analyst, Third-Party Ecosystem Risk Management

Plaid

New York, NY +3 76 days ago $118,680–$175,800
Vendor Risk Management SOC 2 ISO 27001 NIST CSF AI Tooling OneTrust ProcessUnity Whistic SecurityScorecard Risk Assessment Access Control Encryption Incident Response BC/DR Risk Register Compliance Security Governance
4+ yrs exp

Senior Security Analyst

SpaceX

Redmond, WA 36 days ago $130,000–$195,000
Incident Response SIEM Splunk Elastic SOC Forensics Reverse Engineering C2 Exploitation Cloud Security Linux Windows macOS Scripting TTPs
5+ yrs exp

Senior Vulnerability Management Analyst

Nvidia

Remote (CA) +2 6 days ago $160,000–$258,750
Vulnerability Management Security Development Lifecycle (SDL) CVSS CWE SBOM VEX CSAF Threat Modeling Agile Unit Testing AI Systems Responsible Disclosure Bug Bounty Management
6+ yrs exp Remote

Senior Risk Analyst

Sony Group Corporation

San Diego, CA 34 days ago $155,000–$175,000
SQL Tableau Domo Splunk Snowflake AI Tools Rule Engines Experimentation Frameworks Data Visualization Fraud Analytics Risk Scoring Reporting Logic
8+ yrs exp