Description
At Asana, security is foundational to our mission of helping teams work together effortlessly. Our security team protects Asana's employees, users, and customers by proactively addressing threats, ensuring compliance, and fostering a culture of security throughout our product and operations.
As the Security Risk Manager, you will own Asana's internal security risk management program end-to-end. This is a senior role for someone who goes beyond frameworks and checklists — you will engineer the quantitative and automated foundations that let Asana continuously measure and make confident decisions about security risk. You'll build the systems and processes that make risk scalable, not just the policies that describe it, and serve as a trusted advisor to senior leadership.
This role is based in our San Francisco office with an office-centric hybrid schedule. The standard in-office days are Monday, Tuesday, and Thursday. Most Asanas have the option to work from home on Wednesdays. Working from home on Fridays depends on the type of work you do and the teams with which you partner. If you're interviewing for this role, your recruiter will share more about the in-office requirements
What you'll achieve
- Own Asana's security risk management program: Design and continuously mature a quantitative risk framework — including risk scoring methodologies, likelihood and impact modeling, and risk appetite thresholds — that enables consistent, data-driven risk decisions across the organization.
- Build and maintain a living risk register: Own Asana's central security risk register, developing KRIs, tracking trends over time, and driving accountability for risk treatment and remediation with business and technical owners.
- Automate risk identification and monitoring: Design and implement automated data pipelines and integrations that continuously surface security risks — pulling signals from vulnerability scanners, cloud security tooling, SIEMs, and third-party risk sources — so Asana's risk posture is always current and not dependent on manual review cycles.
- Deliver quantitative risk reporting: Develop executive-level dashboards that communicate security risk in business terms — probability, potential impact, cost of control vs. cost of breach, and residual risk exposure — to inform investment and prioritization decisions.
- Partner cross-functionally on risk: Act as the primary security risk partner to Legal, Privacy, Finance, and Engineering. Influence security investment decisions and build a culture of risk awareness across the company.
About you
- 7+ years of experience in information security with a strong focus on security risk management and GRC.
- Demonstrated experience building or leading a security risk management program — not just contributing to one.
- Hands-on experience with quantitative risk methodologies such as FAIR, risk scoring models, or statistical risk analysis. You back up risk ratings with numbers, not just color codes.
- Hands-on experience scripting or building automation to integrate security tooling, build data pipelines, or automate risk monitoring — you've built things, not just directed others to build them.Deep knowledge of security frameworks including NIST CSF, NIST SP 800-30, ISO 27001, SOC 2, and FedRAMP.
- Proven ability to develop risk metrics, KRIs, and executive-level reporting that drives decision-making.
- Strong understanding of cloud environments and SaaS architecture — enough to have credible risk conversations with technical teams.
- Excellent communicator who can translate technical risk findings for both engineering teams and C-suite stakeholders.
- Demonstrates curiosity about AI tools and emerging technologies, with a willingness to learn and leverage them to enhance productivity and decision-making.
At Asana, we're committed to building teams that include a variety of backgrounds, perspectives, and skills. If you're interested in this role and don't meet every listed requirement, we still encourage you to apply.
What we'll offer
For this role, the estimated base salary range is between $194,000–$220,000. The actual base salary will vary based on various factors, including market and individual qualifications objectively assessed during the interview process.
In addition to base salary, your compensation package may include equity and benefits. If you're interviewing for this role, speak with your Talent Acquisition Partner to learn more.
We strive to provide equitable and competitive benefits packages that support our employees worldwide and include:
- Mental health, wellness & fitness benefits
- Career coaching & support
- Inclusive family building benefits
- Long-term savings or retirement plans
- In-office culinary options to cater to your dietary preferences
#LI-Hybrid
About us
Asana is a leading platform for human + AI collaboration. Millions of teams around the world rely on Asana to achieve their most important goals, faster. Asana has been named to Fortune's Best Workplaces for 7+ years and recognized by Fast Company, Forbes, and Gartner for excellence in workplace culture and innovation. We offer an exceptional office-centric culture while adopting the best elements of hybrid models to ensure that every one of our global team members can work together effortlessly. With 13+ offices all over the world, we are always looking for individuals who care about building technology that drives positive change in the world and a culture where everyone feels that they belong.
Join Asana’s Talent Network to stay up to date on job opportunities and life at Asana.
Similar jobs
Est. 282,000 USD
At Asana, security is foundational to our mission of helping teams work together effortlessly. Our Security organization protects Asana’s employees, users, and customers by proactively addressing threats, enabling secure…
Est. 207,000 USD
At Asana, security is foundational to our mission of helping teams work together effortlessly. Our Security organization protects Asana’s employees, users, and customers by proactively addressing threats, enabling secure…
Est. 216,000 USD
We are dedicated to ensuring proactive elimination of entire classes of security risk by engineering the core libraries, platforms and frameworks that provide secure guardrails for all Asanas. We are looking for a Senior…
Est. 216,000 USD
We are dedicated to ensuring proactive elimination of entire classes of security risk by engineering the core libraries, platforms and frameworks that provide secure guardrails for all Asanas. We are looking for a Senior…
Est. 207,000 USD
The IT Systems Engineering team builds the systems and processes that keep Asana running: endpoint management, identity, and the enterprise applications every Asana employee uses every day. As Manager of IT Applications…
Est. 206,500 USD
Asana is looking for a strategic, supportive, and business-savvy leader to manage our global Administrative Business Partner (ABP) community. This is more than a traditional operations role; it is a people-first leadersh…
Est. 165,000 EUR
As a Senior Solutions Architect inside the Solutions Center of Excellence, you will serve as a strategic, technical partner in our most complex enterprise sales cycles. You are a recognized subject matter expert who empo…
Est. 223,500 USD
Our Legal team at Asana works collaboratively across functions to achieve our ambitious mission of fostering effortless teamwork for everyone. We are a tightly-knit and cooperative group committed to supporting teams thr…
Est. 212,500 USD
The Product team builds full-stack features end-to-end. From designing our data models to implementing the subtle interaction behaviors that differentiate good software from great software. We work closely with UI design…
Est. 333,000 USD
We’re looking for an experienced engineering leader to lead and scale Asana’s flagship AI Teammates Pillar within our Core/AI Organization. Reporting directly to the Head of Engineering, AI & AWM, you will oversee an…
Est. 333,000 USD
We are looking for a Director of Engineering to lead our AI Platform organization. This group builds the foundational systems powering every AI experience across Asana. In this role, you will lead four key teams through…
Est. 175,750 USD
The Product team builds full-stack features end-to-end. From designing our data models to implementing the subtle interaction behaviors that differentiate good software from great software. We work closely with UI design…
The Product Management team drives Asana’s product strategy and execution, translating customer needs and opportunities into a compelling roadmap and working cross-functionally to deliver impactful solutions for team pro…
Est. 187,500 USD
The People Team at Asana works to enable all Asanas to achieve our goals as a company in a way that is consistent with our values. We focus on recruiting, developing, and retaining exceptional talent from diverse backgro…
Est. 268,000 USD
Talent Acquisition is dedicated to ensuring that teams at Asana have the people they need to achieve their goals. As a product-driven organization, we hire the people who build Asana, the people who support our users, an…
Est. 167,650 USD
As a member of the AMER Solutions Org, you will act as a trusted advisor for prospects and clients, driving customer acquisition and accelerating revenue growth through a mastery of strategic sales and Asana platform exp…
Est. 202,350 USD
Talent Acquisition is dedicated to ensuring that teams at Asana have the people they need to achieve their goals. As a product-driven organization, we hire the people who build Asana, the people who support our users, an…
We're hiring a Senior Technical Program Manager to lead Asana's push into agentic work management — building the programs that let AI teammates plan, execute, and orchestrate work alongside humans. You'll drive initiativ…
Est. 276,000 PLN
At Asana, security is foundational to our mission of helping teams work together effortlessly. Our security team protects Asana’s employees, users, and customers by proactively addressing threats, ensuring compliance wit…
Est. 367,500 USD
We are looking for a world-class Strategic Enterprise Account Executive to fully own and elevate our relationship with Amazon, one of Asana's largest and most strategic customers globally. In this highly visible role, yo…
Est. 403,800 PLN
At Asana, security is foundational to our mission of helping humanity thrive by enabling the world's teams to work together effortlessly. The security team protects Asana's employees, users, and customers by proactively…
Est. 282,000 USD
We're looking for an Engineering Manager to lead the Agent Context team in NYC. This team owns how Asana's AI systems search, retrieve, and reason over the work graph the search infrastructure, dense embedding pipelines,…
We are looking for a Software Engineer to join our Product team in Vancouver, where we build features end-to-end, from designing our data models to implementing the subtle interaction behaviors that differentiate good so…
Est. 112,000 EUR
We're looking for a senior technical consultant who thrives across the full arc of a complex technical engagement, from pre-sales scoping and architecture through hands-on delivery and handoff. As the sole Technical Serv…
Est. 228,800 USD
At Asana, we’re building agentic work management software to help every organization in the world become more effective in working together and realizing their goals. Our Customer Experience team is committed to helping…
Est. 522,000 PLN
The Security team is responsible for protecting Asana’s employees, users, and customers. We are a team of security engineers and risk and compliance practitioners who build innovative safeguards to ensure that our data i…
Est. 403,000 USD
We’re looking for a strategic and collaborative leader to join Asana as our Chief Accounting Officer. In this pivotal role, you will guide our global financial operations, overseeing our Accounting, controllership, billi…
Est. 173,075 USD
Command by Asana is a new product purpose-built for software development teams that helps engineers stay in flow Command automatically catalogs the decisions, context, and next steps agents need to stay efficient and kee…
Est. 384,000 PLN
We're looking for a Senior Platform Reliability Engineer who brings strong software engineering skills and a deep understanding of system behavior under load and stress. This role is a good fit for someone who wants to o…
Est. 254,500 USD
As Chief of Staff to the Chief Product Officer, you will be a force multiplier for Asana's product leadership team. This role helps the CPO run a high-functioning organization by translating priorities into an effective…