Senior Security Analyst, Security Risk Management

• You will run security risk assessments end-to-end within Plaid's security risk management program - intake, scenario-based analysis, treatment decisions, and monitoring across security, infrastructure, and product risk.

• You will work with engineering SMEs and risk owners on risks ranging from over-privileged access and supply-chain gaps to product abuse and AI adoption, giving owners a clear, defensible basis for accepting or mitigating each one.

• You will build quarterly security risk reporting and the security risk content in leadership and board materials.

• You will help integrate security risk into enterprise risk management, so it is tracked and weighed alongside the rest of the business.

• You will help mature the program as its scope grows, and operate as an AI power user who automates the work so it scales.

Must haves:

• Security risk assessment:
• Experience running scenario-based analyses of technical risks (cloud, IAM, software supply chain, application and product) using NIST SP 800-30, FAIR, or a comparable method.

• Technical depth to engage engineers on architecture and controls, and to tell a real exposure from a hypothetical one.

• Risk program maturity and ERM integration:
• Experience building or maturing a security risk program - methodology, register, treatment and exception workflow, and key risk indicators.

• Experience integrating security risk into an enterprise risk management program.

• Risk reporting and executive communication:
• Experience preparing quarterly risk reporting and building security risk content for executive and board decks.

• Ability to turn technical risk into a concise executive narrative without overstating or hand-waving.

• Security and compliance knowledge:
• Working knowledge of NIST 800-53, NIST CSF, ISO 27001, and SOC 2, and how risk management feeds each.

• AI fluency and tooling:
• Power user who has built AI skills, agents, or automations that materially increase risk-program throughput - and who shares what works with the team.

Nice to have:

• Hands-on FedRAMP 20x experience, including Security Decision Record reporting for rules and Key Security Indicators (SDR-CSO-FRR, SDR-CSX-KSI).

Our mission at Plaid is to unlock financial freedom for everyone. To support that mission, we seek to build a diverse team of driven individuals who care deeply about making the financial ecosystem more equitable. We recognize that strong qualifications can come from both prior work experiences and lived experiences. We encourage you to apply to a role even if your experience doesn't fully match the job description. We are always looking for team members that will bring something unique to Plaid!

Plaid is proud to be an equal opportunity employer and values diversity at our company. We do not discriminate based on race, color, national origin, ethnicity, religion or religious belief, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender, gender identity, gender expression, transgender status, sexual stereotypes, age, military or veteran status, disability, or other applicable legally protected characteristics. We also consider qualified applicants with criminal histories, consistent with applicable federal, state, and local laws. Plaid is committed to providing reasonable accommodations for candidates with disabilities in our recruiting process. If you need any assistance with your application or interviews due to a disability, please let us know at accommodations@plaid.com.

Please review our Candidate Privacy Notice here .

Additional compensation in the form(s) of equity and/or commission are dependent on the position offered. Plaid provides a comprehensive benefit plan, including medical, dental, vision, and 401(k). Pay is based on factors such as (but not limited to) scope and responsibilities of the position, candidate's work experience and skillset, and location. Pay and benefits are subject to change at any time, consistent with the terms of any applicable compensation or benefit plans.