Senior Security Assurance Analyst

at Airbnb

📍 United States

USD 179,000-210,000 per year

SENIOR

✅ Remote

Tech Stack
Tag name is followed by "@" symbol and proficiency level value. About proficiency levels:

1-2 — basic awareness. Minimal hands-on experience, and a rudimentary understanding of the technology's purpose;

3-6 — daily use. Comfortable and regular usage, capable of handling common tasks and challenges related to the technology;

7-9 — you are an expert, you can teach others, you know all the pitfalls and tricks;

10 — exceptional knowledge, comprehensive understanding, and adeptness in all aspects of the technology, including advanced problem-solving. Think twice before claiming or demanding such level.

AWS @ 4 Audit @ 4 Communication @ 6 Compliance @ 7 GitHub @ 4 Microservices @ 4 Security @ 7

Details

The Security Assurance team at Airbnb focuses on Governance, Risk, and Compliance within the Information Security Organization. The team ensures security controls are robust and aligned with Airbnb’s global commitments, bridging the gap between engineering and auditors by translating technical solutions into compliance-ready outcomes.

Responsibilities

Participate in building a comprehensive compliance program, ensuring Airbnb meets requirements for compliance frameworks such as PCI.
Address security posture-related questionnaires to support ongoing compliance initiatives.
Collaborate with external and internal auditors to assist with Test of Design and Test of Effectiveness processes.
Collaborate with stakeholders to understand operational needs and deliver realistic, risk-based recommendations for remediation.
Monitor remediation activities and build metrics and reports on testing and remediation results.
Establish new processes and refine existing ones to drive efficiency and effectiveness.
Collaborate with cross-functional teams to strengthen security practices and protect Airbnb’s community.

Requirements

6+ years of hands-on experience in Information Security Assurance, Governance, Risk, and Compliance.
Deep understanding and working experience with regulatory frameworks, including PCI DSS, SOX, DORA, and DFS 500.
Strong understanding of security foundations and the ability to respond effectively to partner security posture questionnaires.
Experience developing and implementing security controls and information security policies.
Experience using a risk-based approach to evaluate security weaknesses.
Excellent communication skills, with the ability to articulate security controls and business impacts to various stakeholders.
Experience streamlining compliance processes, automating manual workflows, and managing audit readiness.
Strong understanding of cybersecurity frameworks and standards, including NIST, ISO 27001, SOC 2, and PCI DSS.
Ability to work independently and collaborate with cross-functional teams, executive management, and external stakeholders.
Experience with AWS, GitHub, Asana, and microservices preferred.
Bachelor’s degree in Computer Science, Information Systems, or a related field; a master’s degree is preferred.

Work Location

This position is US remote eligible. The role may include occasional work at an Airbnb office or attendance at offsites, as agreed with the manager. Candidates must live in a state where Airbnb, Inc. has a registered entity.

Compensation

The base pay range is $179,000–$210,000 USD. The role may also be eligible for a bonus, equity, benefits, and Employee Travel Credits.

Inclusion And Accommodations

Airbnb is committed to working with the broadest talent pool possible and providing a disability-inclusive application and interview process. Reasonable accommodations are available throughout the recruitment process.