Senior Analyst, Security Risk

Who we are

At Twilio, we’re shaping the future of communications, all from the comfort of our homes. We deliver innovative solutions to hundreds of thousands of businesses and empower millions of developers worldwide to craft personalized customer experiences.

Our dedication to remote-first work , and strong culture of connection and global inclusion means that no matter your location, you’re part of a vibrant team with diverse experiences making a global impact each day

As we continue to revolutionize how the world interacts, we’re acquiring new skills and experiences that make work feel truly rewarding Your career at Twilio is in your hands.

.

Hiring and how we work

We use Artificial Intelligence (AI) to help make our hiring process efficient. That said, every hiring decision is made by real Twilions!

Also, while we are a remote-first company, you may be asked to report in person on an ad-hoc basis for team gatherings, functional off-sites or customer meetings.

.

See yourself at Twilio

Join the team as Twilio’s next Security Risk Senior Analyst.

About the job

The Senior Security Risk Analyst will be a key member of the One Twilio Risk Management program, focused on maturing our Security risk posture by facilitating risk identification and treatment

The team works closely with our Product and Engineering teams to ensure all areas of cyber risk are identified across Twilio and that risk methodologies are operationally effective and in compliance with regulations (e.g. Cybersecurity and/or Telecom / sector-specific regulations) and industry best practice security measures (e.g. NIST RMF, AI RMF, COSO, ISO 31000)

This role provides an exciting opportunity for experienced risk professionals who are passionate about risk management and ready to contribute to the continued growth and maturity of risk practices within a dynamic organization like Twilio.

Responsibilities

In this role, you’ll

• Execute and improve upon daily operations of the One Twilio Risk Management program which includes the further establishment of automated operations for all areas of cyber risk.
• Manage and maintain risk register(s) to track key risk indicators (KRIs) and ensure risks are identified, evalua