Security Risk Engineer
Core
Own Asana's internal security risk management program end-to-end, engineering quantitative and automated foundations to measure and manage security risk.
Role type
Senior Security Risk Engineer (GRC & Quantitative Risk)
Builds
Quantitative risk frameworks, automated data pipelines, executive dashboards, and a living risk register.
Domain
Information Security / GRC / Risk Management
Deliverable
dashboards & analysis
Required skills
Security risk management, quantitative risk methodologies (FAIR, statistical analysis), automation/scripting, security frameworks (NIST CSF, ISO 27001, SOC 2), cloud environments, executive reporting
Preferred skills
AI tools, emerging technologies
Technologies
Vulnerability scanners, SIEMs, cloud security tooling
Responsibilities
Design and mature a quantitative risk framework; Build and maintain a central security risk register with KRIs; Automate risk identification via data pipelines; Develop executive-level dashboards for risk reporting; Partner cross-functionally with Legal, Privacy, Finance, and Engineering.
Seniority
Senior, hands-on IC
