Security Risk and Compliance Analyst, Asana
$130-160k
More information about location
Organising work in one connected space
Be an early applicant
Organising work in one connected space
1001+ employees
Be an early applicant
$130-160k
More information about location
1001+ employees
Company mission
To enable the world's teams to work together effortlessly.
Role
Who you are
- 3+ years of experience in Governance Risk and Compliance, with a focus on risk assessments and security risk management
- Demonstrated understanding of security compliance frameworks and audits (e.g., SOC 2, ISO 27001, PCI DSS, NIST, HIPAA, FedRAMP, etc.)
- Experience with enterprise SaaS applications hosted on public cloud platforms such as AWS
- Experience performing third-party vendor security reviews and due diligence processes
- Proven ability to drive operational process improvements and develop metrics for tracking success
- Excellent communicator and influencer, with the ability to translate complex security and compliance requirements to both technical and non-technical stakeholders
- Demonstrates curiosity about AI tools and emerging technologies, with a willingness to learn and leverage them to enhance productivity, collaboration, or decision-making
What the job involves
- At Asana, security is foundational to our mission of helping teams work together effortlessly
- Our security team protects Asana’s employees, users, and customers by proactively addressing threats, ensuring compliance with legal and regulatory requirements, and fostering a culture of security throughout our product and operations
- We are a team of security engineers and risk and compliance practitioners who build innovative safeguards and collaborate across the organization to build and maintain trust at scale
- As a Security Risk and Compliance Analyst at Asana, you’ll play a critical and high-impact role in building and maintaining trust with Asana’s global customers
- You will be responsible for initiatives that continuously improve our vendor risk assessment and security risk management programs, ensuring we maintain a strong security posture and meet both compliance requirements and customer expectations
- This is a highly cross-functional role where you’ll partner closely with Legal, Privacy, Finance, R&D, and other key stakeholders
- You’ll help evolve our programs with a strategic, risk-based mindset—balancing operational excellence with agility as we grow and scale
- Vendor Risk Management: Own and operate Asana’s vendor risk management program, including performing due diligence for new vendors, managing ongoing monitoring and reporting, and reviewing vendor contracts for security and compliance requirements
- Security Risk Management: Support the execution of periodic assessments across the organization to identify, evaluate, and track risks—driving mitigation and treatment efforts with business and technical owners
- Risk Register Maintenance: Assist in maintaining the central security risk register to promote and drive accountability across the organization
- FedRAMP Compliance: Support FedRAMP continuous monitoring activities to ensure ongoing compliance with FedRAMP moderate requirements
- Compliance Audit Support: Partner with internal teams to support external compliance audits such as FedRAMP, SOC 2, and ISO 27001, providing evidence and program documentation as needed
- Policy Management: Help to draft, update, and maintain security policies, standards, and procedures that align with evolving business needs and industry best practices
Our take
Asana is a web and mobile application designed to help teams organise, track, and manage their work. Acting as a unified hub, it empowers teams to effortlessly generate projects, delegate responsibilities, set deadlines, and foster direct task-related communication, transcending the inefficiencies of traditional email-based coordination.
Despite facing competition from established players like SmartSheet in its market, Asana has navigated its path, bolstered by a successful Initial Public Offering in 2020 and a track record of startup triumphs. This strategic prowess has propelled Asana to amass a robust clientele exceeding 100,000 organizations, boasting notable entities such as Uber and Air France among its ranks.
Since its inception, Asana has undergone exponential growth, with its reach extending to offices sprawled across four continents worldwide. This expansion not only underscores its global footprint but also signifies its commitment to fostering diverse talent pools and catering to a broad spectrum of clients.
Steph
Company Specialist at Welcome to the Jungle
Insights
7% employee growth in 12 months
Company
Funding (last 2 of 8 rounds)
Jun 2020
$200m
CONVERTIBLE
Nov 2018
$50m
SERIES E
Total funding: $414.4m
Company benefits
- Benefits - From comprehensive health benefits including mental health programs and coaching to our in-house culinary program and supportive parental leave policies, our benefits are intentionally designed to ensure that you are energized, focused, and thriving
- Growth - We know that growth isn’t always linear, so we’ll support you in achieving your personal and professional goals. You’ll have the opportunity to take on big responsibilities that impact our success as a company and challenge you in new and fulfilling ways
- Development - We believe in providing everyone with coaching and mentorship. You’ll have access to Conscious Leadership training, success guides, free executive coaching, and our manager training and enablement program
Company HQ
Yerba Buena, San Francisco, CA
Leadership
Dustin Moskovitz
(Co-Founder & CEO)A Harvard economics graduate, Dustin co-founded Facebook in 2004 before branching off in 2008 to found Asana. They are also the co-founder of Open Philanthropy Project and Good Ventures.
Justin Rosenstein
(Co-Founder)Previously Engineering Manager at Facebook and a Product Manager at Google. Currently Co-Founder of One Project.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 32 more jobs at Asana