Senior Security Analyst, Security Risk Management

Runs security risk assessments within Plaid's security risk management program, part of the Security GRC team, covering infrastructure, product and security risks such as excessive access rights, weaknesses in the software supply chain, misuse of the product and the spread of AI tools. The analyst leads scenario-based analyses with engineering experts, scores initial and residual risk and gets owners to a documented decision, prepares the quarterly Security Risk Review and board material, maps security risk into enterprise risk management, supports FedRAMP 20x risk acceptances, and builds AI automations for intake and reporting.

Plaid wants experience with NIST SP 800-30, FAIR or similar methods, building or maturing a risk program and tying it into ERM, executive risk reporting, and knowledge of NIST 800-53, ISO 27001 and SOC 2. Hybrid from Seattle.