Senior Security Analyst, Customer Assurance

Plaid

Own Plaid's Security Contracts workstream end-to-end, focusing on security provisions and contract reviews. Collaborate with Legal and GTM to ensure effective security posture.

Posted 7/28/2026full-timeNew York City • New York • 🇺🇸 United StatesSenior💰 $134,160 - $213,600 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in reviewing security provisions in MSAs, DPAs, and security addenda, translating security posture into defensible contract positions. Proficient in building scalable security trust enablement programs and leveraging AI-assisted workflows to enhance productivity and reporting.

Highest-signal resume keywords

Security Contract ReviewSecurity Trust Enablement ProgramsKPI Definition and ReportingAI-Assisted WorkflowsFintech and Financial Services Experience

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security Provision ReviewCommon Security Clause TypesSOC 2ISO 27001NIST CSFPCI DSSGLBAGDPRNIST 800-53Pattern Analysis

Soft Skills

Exceptional Communication SkillsAnalytical SkillsCollaborative CommunicationNegotiation SkillsTrust Building

Tools & Technologies

AI ToolingMetrics Tracking InfrastructureDashboards

Industry Keywords

FintechPaymentsFinancial ServicesSecurity ControlsCompliance Posture

About the role

Key responsibilities & impact

You will own Plaid’s Security Contracts workstream end-to-end—the DRI for how security contract reviews get done, how fast they move, and how the program improves over time.
You will review security provisions in customer MSAs, DPAs, and security addenda, identify unacceptable clauses, and provide Legal and GTM with the actionable security feedback they need to move deals forward.
You will build the playbooks, processes, and program infrastructure that make the Security Contracts workstream scalable — so the team moves faster on every deal that follows.
You will use pattern analysis and data to proactively reduce deal friction over time, own program metrics and reporting, and operate as an AI power user to maximize throughput.
You will also support broader security trust enablement activities — responding to customer security questionnaires and joining external audit calls with customers and data partners — with the same rigor and responsiveness you bring to the contracts workstream.
Lead Security Contract Reviews: Review security provisions in customer MSAs, DPAs, security addenda, and security exhibits — identifying unacceptable clauses, forming a clear security position, and providing Legal with actionable feedback they can take directly into negotiations. Your positions will give Legal and GTM a consistent, defensible security voice at the table and directly reduce deal cycle times.
Shape the Security Contract Review Strategy: Design and own the end-to-end program infrastructure — intake process, tiered SLAs, security positions runbooks, and handoff protocols with Legal and GTM. Your work will transform security reviews from an ad-hoc bottleneck into a predictable, scalable function that the business can rely on.
Drive Strategic Intelligence: Track security contract asks across deals, identify recurring patterns, and determine whether they reflect a gap in Plaid's program or a non-standard customer request. For identified gaps, assess feasibility and propose recommendations to leadership. For existing capabilities, codify them in the standard security addendum to eliminate future negotiation cycles.
Accelerate Deals: Join customer and data partner calls as Plaid's security subject matter expert — comfortable navigating the formality and pace of traditional financial institutions, building trust through patience and clear, collaborative communication. Your involvement will shorten security contract review cycles from weeks to days and directly unblock revenue.
Own Program Health: Define the KPIs, build the dashboards, and deliver regular reporting on program health to Security and GTM leadership. Your reporting will give leadership clear visibility into deal friction, SLA adherence, and where the program needs to improve.
Scale Through AI and Tooling: Build and scale AI-assisted workflows for security assurance, pattern analysis, and reporting — and share what works across the team. Your approach will set the standard for how the Security GRC team leverages AI to increase productivity.
Support Security Trust Activities: Respond to customer security questionnaires and support external audit calls with customers and data partners — serving as Plaid's security subject matter expert across all customer-facing assurance activities. Your involvement ensures Plaid presents a consistent, credible security posture across every customer touchpoint, not just at the contract stage.

Requirements

What you’ll need

Experience reviewing security provisions in MSAs, DPAs, and security addenda — and translating that expertise into clear positions Legal can take directly into negotiations.
Deep familiarity with common security clause types: e.g. incident notification windows, audit rights, encryption requirements, subprocessor obligations, data retention, and penetration testing provisions.
Ability to translate a company's security posture and risk appetite into clear, defensible contract positions and hold those positions through multiple negotiation cycles.
Experience representing a company's security program directly to customers and financial institution partners on calls — fielding questions about security controls, compliance posture, and contractual obligations.
Working knowledge of SOC 2, ISO 27001, NIST CSF, PCI DSS, GLBA, GDPR/CCPA, NIST 800-53, etc.
Deep understanding of what "standard" security contract language looks like in fintech and banking agreements.
Prior experience in fintech, payments, or financial services — you understand the security expectations of data partners and regulated entities, and know how to navigate those relationships with the patience and credibility they require.
Experience building security trust enablement programs — designing intake processes, tiered SLAs, escalation paths, and runbooks, not just executing within existing ones.
Strong analytical skills: ability to identify patterns across a high volume of security contract asks, track pushback rates and cycle counts, and translate findings into process improvements.
Experience with metrics ownership: defining KPIs, building tracking infrastructure, and reporting on program health to cross-functional stakeholders.
Exceptional written and verbal communication skills — precise enough for Legal to use your positions to draft language, clear enough for a Sales rep to use in a customer call.
Experience working directly with Legal and GTM teams as a security subject matter expert.
Experience driving customer and data partner calls involving security.
Demonstrated ability to build and scale AI-assisted workflows — applies AI tooling to Security Assurance activities like contract review, questionnaire completion, clause library maintenance, pattern analysis, and reporting to materially increase throughput.

Benefits

Comp & perks

Additional compensation in the form(s) of equity and/or commission are dependent on the position offered.
Plaid provides a comprehensive benefit plan, including medical, dental, vision, and 401(k).