Senior Analyst, Third-Party Risk Management

DoorDash

Senior Analyst focusing on Third-Party Risk Management for DoorDash's global infrastructure security team. Collaborating cross-functionally to optimize security partnerships and governance frameworks.

Posted 7/13/2026full-timeRemote • Arizona, California, Illinois, New York, Texas, Wisconsin • 🇺🇸 United StatesSenior💰 $132,600 - $195,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Third Party Risk Management (TPRM) methodologies, including risk assessments, vendor onboarding, and compliance frameworks. Proven ability to architect security strategies and lead cross-functional collaboration in a global environment.

Highest-signal resume keywords

Third Party Risk Management (TPRM)Security Risk AssessmentsInformation Security Frameworks (NIST, ISO, SOC 2)Vendor Risk ManagementSecurity Assurance Documentation Review

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Risk AssessmentsDue DiligenceProgram BuildingSecurity AuditsAI/ML Risk AssessmentAPI IntegrationsCloud SecuritySecurity ControlsRemediation ManagementTechnical Review of Security Documentation

Soft Skills

Creative Problem SolvingCross-Functional CollaborationExcellent Communication Skills

Industry Keywords

BPO Security StrategySupplier Security AI GovernanceGovernance, Risk, and Compliance (GRC)Cloud VendorsSaaS Security

Tech Stack

Tools & technologies

Cloud

About the role

Key responsibilities & impact

Drive the continuous maturation of TPRM program into a proactive, strategic security partnership
Architect and govern security strategy for BPO and contingent worker ecosystem
Design and build process automations for TPRM program
Pioneer the Supplier Security AI Governance framework
Establish and own core program governance and centralized reporting function
Partner cross-functionally with security engineering, procurement, business, privacy, and legal teams
Lead end-to-end issues and remediation tracking process
Execute core TPRM lifecycle tasks such as risk assessments, due diligence, and vendor onboarding

Requirements

What you’ll need

7+ years of progressive experience in security-focused TPRM methodologies
Bachelor’s or Master’s degree in Information Security, Computer Science, Business Administration, or related field
Experience with program building, conducting security and/or assurance audits, controls, and risk assessments, and remediation management
Deep technical understanding and experience conducting comprehensive security risk and gap assessments of cloud, SaaS, including Artificial Intelligence (AI) solutions, and infrastructure vendors
Proficiency in the technical review of core security assurance documentation (CAIQ, SIG, SOC 2 Type 2 reports, Penetration Test reports, etc.)
Experience in the technical vetting of complex vendor solutions (API integrations, security of cloud-native services)
Practical experience in assessing unique risks associated with AI/ML models
Experience implementing major information security, privacy, and risk management frameworks (e.g. NIST, ISO, SOC 2)
Experience managing security and compliance programs across GRC disciplines in a global public company environment
Ability to solve complex systemic issues requiring creative thinking and cross-functional collaboration
Experience managing vendor risk across the full relationship lifecycle
Excellent verbal and written communication skills

Benefits

Comp & perks

Comprehensive benefits package
401(k) plan with employer matching
16 weeks of paid parental leave
Wellness benefits
Commuter benefits match
Paid time off and paid sick leave in compliance with applicable laws
Medical, dental, and vision benefits
11 paid holidays
Disability and basic life insurance
Family-forming assistance
Mental health program