Security Risk Manager
Core
Own Asana's internal security risk management program end-to-end, engineering quantitative and automated foundations to measure and manage security risk.
Role type
Senior Security Risk Manager (GRC)
Builds
Quantitative risk frameworks, automated data pipelines for risk monitoring, and executive-level risk dashboards.
Domain
Information Security / GRC / SaaS
Deliverable
production ML models | dashboards & analysis | infrastructure
Required skills
quantitative risk methodologies (FAIR, statistical analysis), security frameworks (NIST CSF, ISO 27001, SOC 2), automation/scripting, cloud environments, KRIs, executive reporting
Preferred skills
AI tools, emerging technologies
Technologies
vulnerability scanners, SIEMs, cloud security tooling
Responsibilities
Design and mature a quantitative risk framework; maintain a living risk register with KRIs; automate risk identification and monitoring via data pipelines; deliver quantitative risk reporting to leadership; partner cross-functionally on risk decisions.
Seniority
Senior, hands-on IC