DoorDash

DoorDash

Manager, Third-Party Risk Management (TPRM)

US · Senior · Contract

Sponsorship not specified$164k-$242kDetected 10 days ago
PythonSQLCI/CDOAuthCybersecurityIncident ResponseComplianceLogisticsProcurementPerformance ManagementLeadershipCommunication

Stay score

odds of building a lasting career here

64Sponsors, lottery-bound
Cap-exempt (no lottery)0
Sponsors this role100
Entry-level history0
PERM / green-card track0
Lottery odds (Level IV)94
Fits your clock70

Sponsors, but it's cap-subject — you still face the weighted lottery (~61% per draw at Level IV). Good if you win; have a cap-exempt backup on your list.

Lottery odds assume a STEM candidate.

Personalize to your clock →

Employer immigration record

from this employer's Department of Labor filings

Green-card follow-through: 53%

Of 34 labor certifications old enough to have been used, 16 expired without the employer filing the next step. Median time from filing to decision: 481 days.100% of their filings were for a worker who already held the job.Only certifications past the 180-day window are counted — recent ones cannot have expired yet.

Files H-1B transfers

125 transfer filings in the last year, covering 125 workers. Median labor-condition decision: 7 days. An employer that already files transfers is one that can take over an existing H-1B.

Sourced from Department of Labor LCA, PERM and prevailing-wage disclosure data. Employer matching is by name, so figures may be split across an employer's legal entities. Absence of a filing means none appears in our copy of the data, not that none exists.

Community outcomes

No reports yet — be the first to help the next applicant.

About the role

  • DoorDash's Global Governance, Risk and Compliance (GRC) team helps the business scale securely through practical risk-based decisions, reliable controls and clear accountability.
  • Our third-party risk program protects the systems and data behind our marketplace across DoorDash, Wolt, and Deliveroo.
  • Reporting to the Global Head of GRC, you will serve as their US-based deputy and provide GRC leadership and escalation coverage during US business hours.

Responsibilities

  • Maintain a reliable vendor inventory, policies, assessment standards, and service levels across DoorDash, Wolt, and Deliveroo, covering cloud, SaaS, business process outsourcing (BPO), and other critical suppliers.
  • Lead assessments of vendors connected to crown jewel systems, including identity platforms, production cloud, source code and CI/CD, and sensitive-data platforms.
  • Verify remediation, document residual risk acceptance with accountable business owners and review dates, and confirm access removal and data handling at termination.
  • Own the TPRM framework for third-party AI and agentic services.
  • Hire, coach, and directly manage TPRM professionals and other US-based GRC direct reports.
  • Own goals, workload, performance reviews, career development, and succession planning.
  • Raise the team's technical assessment and automation skills, working with functional leads to align priorities across GRC disciplines.
  • At DoorDash, our mission to empower local economies shapes how our team members move quickly, learn, and reiterate in order to make impactful decisions that display empathy for our range of users-from Dashers to merchant partners to consumers.
  • DoorDash is growing rapidly and changing constantly, which gives our team members the opportunity to share their unique perspectives, solve new challenges, and own their careers.
  • Build a prioritized roadmap for applying AI and automation across the vendor lifecycle, with clear outcomes, dependencies, and ownership.

Requirements

  • 6+ years of progressive experience in technical third-party risk, security risk, or security engineering, including substantial hands-on experience leading complex vendor assessments and ownership of a TPRM program.
  • A track record of improving risk practices in a technology environment.
  • Experience leading distributed teams and coordinating delivery across different GRC specialties.
  • You can evaluate SOC 2 Type II scope, exceptions, subservice organizations, and customer responsibilities
  • Experience implementing or improving TPRM/GRC platforms and workflow automation, with practical knowledge of APIs and integration patterns.
  • Python, SQL, low-code orchestration, and production-scale agentic experience are advantages.
  • Hands-on knowledge of cloud and SaaS security, privileged supplier or BPO access, data protection, incident response, and recovery.
  • You can apply security frameworks and threat modeling to a vendor's actual deployment and assess AI-specific risks such as data use, tool permissions, and prompt injection.
  • You can earn credibility with engineers, Legal, Procurement, and business leaders while managing urgent US-hours escalations.

Compensation

  • The successful candidate's starting pay will fall within the pay range listed below and is determined based on job-related factors including, but not limited to, skills, experience, qualifications, work location, and market conditions.
  • Base salary is localized according to an employee's work location.
  • In addition to base salary, the compensation for this role includes opportunities for equity grants.
  • flexible paid time off/vacation, plus 80 hours of paid sick time per year.
  • For hourly roles:
  • The national base pay range for this position within the United States, including Illinois and Colorado.

Benefits

  • Set the vision for an AI-native TPRM function.
  • Scale the use cases that demonstrate better quality, coverage or turnaround.
  • Provide US-hours GRC coverage and escalation support in partnership with the Global Head of GRC.
  • Measure how AI and automation improve coverage or reduce effort, and translate material risks into business impact to guide priorities and investment.
  • DoorDash also offers medical, dental, and vision benefits, 11 paid holidays, disability and basic life insurance, family-forming assistance, and a mental health program, among others.
  • To learn more about our benefits, visit our careers page here.
  • See below for paid time off details:

Equal opportunity

  • Our Commitment to Diversity and Inclusion
  • We value a diverse workforce - people who identify as women, non-binary or gender non-conforming, LGBTQIA+, American Indian or Native Alaskan, Black or African American, Hispanic or Latinx, Native Hawaiian or Other Pacific Islander, differently-abled, caretakers and parents, and veterans are strongly encouraged to apply.
Apply directly at DoorDash →Create a free account for alerts like thisView DoorDash immigration profile

This listing is sourced directly from DoorDash's careers page and normalized into a canonical job model.