Quantify and automate security risk for Asana in Vancouver, BC, using risk modeling, data pipelines, and executive reporting. This senior role follows an office-centric hybrid schedule. Asana’s Security Risk Engineer owns the internal security risk management program end-to-end. You will build quantitative foundations, automate monitoring, and support confident security decisions. The work spans GRC, cloud environments, SaaS architecture, and cross-functional partnership.

Key Responsibilities
- Design and mature Asana’s quantitative security risk framework
- Maintain the central risk register and develop KRIs
- Build automated pipelines integrating security tooling and third-party signals
- Create executive dashboards covering exposure, impact,



and residual risk
- Partner with Legal, Privacy, Finance, and Engineering

Requirements:
- Seven or more years in information security and GRC
- Experience building or leading security risk programs
- Hands-on FAIR, risk scoring, or statistical risk analysis experience
- Scripting, automation, data pipeline, or risk monitoring experience
- Knowledge of NIST, ISO 27001, SOC 2, and FedRAMP Bring quantitative risk, automation, cloud, and communication expertise to strengthen Asana’s security decisions in Vancouver.

📌 Senior Security Risk Engineer (Vancouver)
🏢 asana
📍 Vancouver