Quantify and automate security risk for Asana in Vancouver, BC, using risk modeling, data pipelines, and executive reporting. This senior role follows an office-centric hybrid schedule. Asana’s Security Risk Engineer owns the internal security risk management program end-to-end. You will build quantitative foundations, automate monitoring, and support confident security decisions. The work spans GRC, cloud environments, SaaS architecture, and cross-functional partnership. Key Responsibilities:

Design and mature Asana’s quantitative security risk framework Maintain the central risk register and develop KRIs Build automated pipelines integrating security tooling and third-party signals Create executive dashboards covering exposure, impact,



and residual risk Partner with Legal, Privacy, Finance, and Engineering Requirements:

Seven or more years in information security and GRC Experience building or leading security risk programs Hands-on FAIR, risk scoring, or statistical risk analysis experience Scripting, automation, data pipeline, or risk monitoring experience Knowledge of NIST, ISO 27001, SOC 2, and FedRAMP Bring quantitative risk, automation, cloud, and communication expertise to strengthen Asana’s security decisions in Vancouver.

📌 Senior Security Risk Engineer (Winnipeg)
🏢 asana
📍 Winnipeg