Quantify and automate security risk for Asana in Vancouver, BC, using risk modeling, data pipelines, and executive reporting. This senior role follows an office-centric hybrid schedule.

Asana’s Security Risk Engineer owns the internal security risk management program end-to-end. You will build quantitative foundations, automate monitoring, and support confident security decisions. The work spans GRC, cloud environments, SaaS architecture, and cross-functional partnership.

Key Responsibilities

Design and mature Asana’s quantitative security risk framework

Maintain the central risk register and develop KRIs

Build automated pipelines integrating security tooling and third-party signals

Create executive dashboards covering exposure, impact,



and residual risk

Partner with Legal, Privacy, Finance, and Engineering

Requirements

Seven or more years in information security and GRC

Experience building or leading security risk programs

Hands-on FAIR, risk scoring, or statistical risk analysis experience

Scripting, automation, data pipeline, or risk monitoring experience

Knowledge of NIST, ISO 27001, SOC 2, and FedRAMP

Bring quantitative risk, automation, cloud, and communication expertise to strengthen Asana’s security decisions in Vancouver.

📌 Senior Security Risk Engineer (Winnipeg)
🏢 asana
📍 Winnipeg