Security Risk Engineer

Location: Vancouver, BC, Canada; office-centric hybrid schedule with in-office days on Monday, Tuesday, and Thursday. Working from home on Wednesdays is generally available, while Fridays depend on the work and partner teams.

Base salary: CAD 158,000–180,000 per year, excluding equity and benefits.

Company

Asana is a platform for human and AI collaboration used by millions of teams worldwide.

What you will do

• Own and continuously mature Asana’s quantitative security risk management program, including risk scoring, likelihood and impact modeling, and risk appetite thresholds.
• Maintain the central security risk register, develop KRIs, track trends, and drive risk treatment and remediation with business and technical owners.
• Build automated data pipelines and integrations using signals from vulnerability scanners, cloud security tools, SIEMs, and third-party risk sources.
• Develop executive dashboards covering probability, potential impact, control and breach costs, and residual risk exposure.
• Partner with Legal, Privacy, Finance, and Engineering to guide security investments and strengthen risk awareness.

Requirements

• 7+ years of information security experience, with a strong focus on security risk management and GRC.
• Experience building or leading a security risk management program.
• Hands-on experience with quantitative risk methodologies such as FAIR, risk scoring models, or statistical risk analysis.
• Hands-on scripting or automation experience integrating security tools, building data pipelines, or automating risk monitoring.
• Deep knowledge of NIST CSF, NIST SP 800-30, ISO 27001, SOC 2, and FedRAMP.
• Experience developing risk metrics, KRIs, and executive-level reporting that drives decisions.
• Strong understanding of cloud environments and SaaS architecture.
• Excellent communication skills, including translating technical risk findings for engineering teams and C-suite stakeholders.

Nice to have

• Curiosity about AI tools and emerging technologies, with willingness to use them to improve productivity and decision-making.

Culture & Benefits

• Office-centric hybrid work model with flexible work-from-home options depending on the day and role.
• Mental health, wellness, and fitness benefits.
• Career coaching and support.
• Inclusive family-building benefits.
• Long-term savings or retirement plans.
• In-office culinary options supporting dietary preferences.