Remote Jobs Now
DoorDash USA

Manager, Third-Party Risk Management (TPRM)

New York: eligible, according to the employer's posting.
Who can apply: Only open to applicants in: New York.
Location as listed by the employer: “United States- Remote; New York”
Apply on DoorDash USA's site ↗

Opens the employer's official application page.

Generate a CV for this job

A CV tailored to this job's requirements in one click — boosted with testimonials from people who know your work.

Generate my CV

About this role

DoorDash USA is hiring for a Manager, Third-Party Risk Management (TPRM) role. See the official posting for full details.

Requirements

  • 6+ years of progressive experience in technical third-party risk, security risk, or security engineering, including substantial hands-on experience leading complex vendor assessments and ownership of a TPRM program. A t…
  • Experience leading distributed teams and coordinating delivery across different GRC specialties.
  • Deep experience assessing enterprise integrations and their failure modes. You can examine SAML/OIDC federation, OAuth scopes and tokens, SCIM provisioning, APIs, service accounts, cloud IAM, network boundaries, and dat…
  • Strong assurance and control-testing skills. You can evaluate SOC 2 Type II scope, exceptions, subservice organizations, and customer responsibilities; interpret penetration tests and ISO 27001 or PCI DSS evidence where…
  • An AI-native working approach: you actively use AI to improve your work and have built or piloted AI-assisted workflows. You can articulate a vision for agentic TPRM, identify useful applications, and explain how you ev…
  • Experience implementing or improving TPRM/GRC platforms and workflow automation, with practical knowledge of APIs and integration patterns. You can define requirements, work with structured data, and partner with engine…
  • Hands-on knowledge of cloud and SaaS security, privileged supplier or BPO access, data protection, incident response, and recovery. You can apply security frameworks and threat modeling to a vendor’s actual deployment a…
  • Sound judgment and executive communication, with experience representing a security or GRC leader, making decisions within delegated authority, and resolving difficult risk tradeoffs. You can earn credibility with engin…

Summarized from the employer's posting — check the full posting for every requirement.