Senior Security Analyst, Security Risk Management

Plaid

Confirmed live today High trust

Remote

Quick summary

Work type: Remote
Location: RaleighSan Francisco, CANew York, NY
Salary: $124,000–$194,000 / yr
Posted: 24 days ago
Freshness: Confirmed live today
Nearby: 99+ roles within 25 mi

Market check

Salary context

Competitive pay

How this pay compares to similar roles

Similar $180k

This role $159k

$113k $226k

below market most similar roles pay here above market

This role pays less than 66% of similar roles. Most pay $146,100–$214,900 — the blue band above. At the midpoint, this role pays about $159k versus about $180k for comparable roles.

Based on 240 similar postings.

Employer

About Plaid

Plaid is a financial technology company that builds a data network powering digital finance applications, enabling consumers to securely connect their financial accounts to apps and services. Industry: Financial Technology & Data Infrastructure

Plaid currently has 66 open roles on FindRole.

Listed pay typically runs $190,800–$262,800 across 66 roles with salary data.

Most-posted roles

View all roles at Plaid

At a glance

TL;DR · Senior Security Analyst, Security Risk Management

Role Posting Log in to save

The Senior Security Analyst, Security Risk Management joins the Security Governance, Risk, and Compliance team to proactively manage information security risks and maintain effective controls. You will run end-to-end security risk assessments, performing scenario-based analyses on infrastructure, product abuse, and supply-chain gaps. Key responsibilities include building quarterly risk reporting for executive and board materials, integrating security risks into the enterprise risk management taxonomy, and maturing the risk framework. You will utilize NIST SP 800-30, FAIR, NIST 800-53, NIST CSF, ISO 27001, and SOC 2 standards to evaluate technical exposures. Additionally, you will act as an AI power user to automate intake triage and report generation. This role ensures the platform remains resilient by turning technical vulnerabilities into defensible, documented treatment decisions for leadership.

Skills

Security Risk Assessment NIST SP 800-30 FAIR NIST 800-53 NIST CSF ISO 27001 SOC 2 FedRAMP Enterprise Risk Management IAM Software Supply Chain AI Automation

What you'll do

Run end-to-end security risk assessments including intake, scenario-based analysis, and treatment decisions.
Collaborate with engineering SMEs to identify and score risks related to infrastructure, supply chain, and product abuse.
Build quarterly security risk reports and develop content for executive and board-level presentations.
Integrate security risk into the enterprise risk management taxonomy and rating scales.
Evolve the risk framework, registers, and key risk indicators to mature the security program.
Document risk explanations and senior-official acceptances for FedRAMP rules and gaps.
Develop AI-driven automations for risk intake triage, register hygiene, and report generation.

What we're looking for

Experience running scenario-based analyses of technical risks using NIST SP 800-30, FAIR, or comparable methods.
Technical depth to engage engineers on architecture, controls, and distinguishing real exposures from hypothetical ones.
Experience building or maturing a security risk program including methodology, registers, treatment workflows, and key risk indicators.
Experience integrating security risk into an enterprise risk management program.
Experience preparing quarterly risk reporting and building security risk content for executive and board decks.
Ability to translate technical risk into a concise executive narrative.
Working knowledge of NIST 800-53, NIST CSF, ISO 27001, and SOC 2.
Power user experience building AI skills, agents, or automations to increase risk-program throughput.
Hands-on FedRAMP 20x experience, including Security Decision Record reporting for rules and Key Security Indicators (preferred).

Similar roles

Senior Security Engineer, Strategic Risk

Apple Inc

Seattle, WA 19 days ago $175,000–$308,500

Threat Modeling Incident Response AI ML Cryptography Access Control Splunk OSQuery Cloud-Native Architecture Security Engineering Threat Hunting Authentication Frameworks Security Reviews

7+ yrs exp

Save

Security Analyst, Third-Party Ecosystem Risk Management

Plaid

New York, NY +3 85 days ago $118,680–$175,800

Vendor Risk Management SOC 2 ISO 27001 NIST CSF AI Tooling OneTrust ProcessUnity Whistic SecurityScorecard Risk Assessment Access Control Encryption Incident Response BC/DR Risk Register Compliance Security Governance

4+ yrs exp

Save

Senior Information Security Analyst

McKesson Corporation

Irving, TX 2 days ago $122,300–$203,900

Wiz GCP AWS Azure ServiceNow Rapid7 Panorama CNAPP CSPM Vulnerability Management Cloud Security Containers Serverless Risk-based Prioritization Security Graph

7+ yrs exp Hybrid

Save

Information Security Risk Analyst

Lam Research

Tualatin, OR 112 days ago

SIEM KQL SPL SQL Python PowerShell Microsoft Sentinel Splunk Exabeam Securonix Microsoft Defender XDR Azure AWS Google Cloud UEBA MITRE ATT&CK STIX/TAXII MISP Logic Apps Incident Response Threat Hunting

Hybrid

Save

Offensive Security Senior Analyst

S&P Global

Boulder, CO +2 2 days ago $120,000–$155,000

Red Teaming Purple Teaming Python PowerShell Bash JavaScript AWS Azure GCP MITRE ATT&CK CI/CD DevSecOps SIEM EDR Next-Gen Firewalls IDS/IPS WAF Linux Windows Network Protocols Artificial Intelligence

5+ yrs exp

Save

Senior Security Analyst

SpaceX

Redmond, WA 45 days ago $130,000–$195,000

Incident Response SIEM Splunk Elastic SOC Forensics Reverse Engineering C2 Exploitation Cloud Security Linux Windows macOS Scripting TTPs

5+ yrs exp

Save