Senior Security Risk Engineer

Quantify and automate security risk for Asana in Vancouver, BC, using risk modeling, data pipelines, and executive reporting. This senior role follows an office-centric hybrid schedule.Asana’s Security Risk Engineer owns the internal security risk management program end-to-end. You will build quantitative foundations, automate monitoring, and support confident security decisions. The work spans GRC, cloud environments, SaaS architecture, and cross-functional partnership.Key Responsibilities:
Design and mature Asana’s quantitative security risk frameworkMaintain the central risk register and develop KRIsBuild automated pipelines integrating security tooling and third-party signalsCreate executive dashboards covering exposure, impact, and residual riskPartner with Legal, Privacy, Finance, and EngineeringRequirements:
Seven or more years in information security and GRCExperience building or leading security risk programsHands-on FAIR, risk scoring, or statistical risk analysis experienceScripting, automation, data pipeline, or risk monitoring experienceKnowledge of NIST, ISO 27001, SOC 2, and FedRAMPBring quantitative risk, automation, cloud, and communication expertise to strengthen Asana’s security decisions in Vancouver.
#J-18808-Ljbffr