Security Analyst, Third-Party Ecosystem Risk Management

About the role

Plaid’s Security Governance, Risk, and Compliance team is part of Plaid’s security organization. It proactively manages information security risks and maintains effective controls, with the goal of reducing the likelihood and impact of security risks while operating an assurance program that builds trust with customers, consumers, and data partners.

Third-party ecosystem risk includes vetting the security of vendors, customers, and partners who connect to Plaid’s platform.

Responsibilities

• Run end-to-end security risk assessments for third parties, from intake and questionnaire through risk rating, findings, and tracked exceptions.
• Assess the security posture of customers and partners onboarding to the platform with the same rigor applied to vendors.
• Manage the third-party risk lifecycle, including risk tiering, reassessment cadence, remediation follow-through, and keeping records current.

Key facts

• The role runs end-to-end security risk assessments for third parties.
• The role assesses customers and partners onboarding to Plaid’s platform.
• Third-party risk work includes risk tiering, reassessment cadence, and remediation follow-through.