SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 179,000 - 210,000 / annual
Airbnb's Security Assurance team focuses on Governance, Risk, and Compliance (GRC) within the Information Security Organization. This role bridges the gap between engineering and auditors by translating technical security solutions into compliance-ready outcomes.
As a Senior Security Assurance Analyst, you will be a key member of the Security Assurance team responsible for maintaining and elevating Airbnb's security posture. You'll work on critical compliance initiatives such as PCI DSS and SOX, ensuring that security controls meet industry standards and regulatory requirements. You'll establish new processes and refine existing ones to drive efficiency and effectiveness across the organization.
Key responsibilities include:
- Building and maintaining a comprehensive compliance program ensuring Airbnb meets requirements for frameworks such as PCI DSS, SOX, DORA, and DFS 500
- Addressing security posture-related questionnaires to support ongoing compliance initiatives
- Collaborating with external and internal auditors to assist with Test of Design and Test of Effectiveness processes
- Working with stakeholders to understand operational needs and deliver realistic, risk-based recommendations for remediation
- Monitoring remediation activities and building metrics and reports on testing and remediation results
- Collaborating with cross-functional teams across Airbnb, including engineering, business partners, and executive management
You will navigate complex regulatory landscapes, champion best practices, and maintain world-class security standards across every region Airbnb operates. Collaboration will be at the heart of your role as you work to strengthen security practices and protect the trust the community places in Airbnb.
REQUIREMENTS:
- 6+ years of hands-on experience in Information Security Assurance, Governance, Risk and Compliance
- Deep understanding and working experience with regulatory frameworks (PCI DSS, SOX, DORA, DFS 500)
- Strong understanding of security foundations to effectively respond to partner security posture questionnaires
- Skilled in developing and implementing security controls and InfoSec policies
- Experience with risk-based approach in evaluating security weaknesses
- Excellent communication skills; able to articulate security controls and business impacts across various stakeholders
- Experienced in streamlining compliance processes, automating manual workflows, and managing audit readiness
- Strong understanding of cybersecurity frameworks and standards (NIST, ISO 27001, SOC 2, PCI DSS)
- Ability to work independently and collaborate with cross-functional teams, executive management, and external stakeholders
- Experience with AWS, Github, Asana and Microservices preferred
- Bachelor's degree in Computer Science, Information Systems or related field; Master's degree preferred
- Must live in a US state where Airbnb, Inc. has a registered entity (certain states excluded)
