Jobs / United States / Plaid INC
Senior Security Analyst, Security Risk Management
Plaid INC · 🇺🇸 Seattle Office; Raleigh Office; San Francisco HQ; New York City Office
Sponsorship verdict
Sponsorship possible
One solid signal, not two — worth applying, and worth asking about sponsorship early.
- Employer is on a government sponsor recordThe US Department of Labor certified 27 H-1B/E-3 labor condition applications for this employer between Oct 2025 and Jun 2026 (latest Jun 2026) — the step every H-1B hire needs first. USCIS also records 9 H-1B approvals in FY2023. Source: LCA disclosure data (US Department of Labor (OFLC)).
- The posting doesn’t mention sponsorshipSilence isn’t a refusal — ask the recruiter before investing much time.
- No salary bar for this routeH-1B has no fixed salary bar: the employer must pay at least the prevailing wage for the role and area. Cap-subject employers enter a lottery weighted by wage level. Source: https://www.federalregister.gov/documents/2025/12/29/2025-23853/weighted-selection-process-for-registrants-and-petitioners-seeking-to-file-cap-subject-h-1b, rules effective 2026-02-27.
- What Plaid INC paid sponsored hires in similar roles1 certified filing for “Senior Software Engineer” (Information Security Analysts) in NY: $180k–$180k, median $180k. Most were filed at wage level IV (100%) — 4 lottery entries, ≈61% projected selection odds for cap-subject employers. Source: US Department of Labor LCA disclosure data (Oct 2025 – Jun 2026).
- Confirmed live todayWhen a source last listed this job as open.
US H-1B: cap-subject employers enter a lottery weighted by wage level — Level I gets 1 entry, Level IV gets 4 (DHS projected selection odds ≈15% at Level I to ≈61% at Level IV). Universities and non-profit research employers are cap-exempt. The $100,000 fee for new petitions from abroad is currently blocked by a court order (appeal pending).
A verdict summarises public evidence; it is not legal advice and never a guarantee — the employer and the immigration authority decide. Sign in to factor in where you can already work.
Or apply yourself on the official page →
Sponsor Radar — Plaid INC
The US Department of Labor certified 27 H-1B/E-3 labor condition applications for this employer between Oct 2025 and Jun 2026 (latest Jun 2026) — the step every H-1B hire needs first. USCIS also records 9 H-1B approvals in FY2023. Source: LCA disclosure data (US Department of Labor (OFLC)).
Past sponsorship or register membership never guarantees sponsorship for this vacancy or for you. Full Sponsor Radar for Plaid INC →
About the role
We believe that the way people interact with their finances will drastically improve in the next few years. We’re dedicated to empowering this transformation by building the tools and experiences that thousands of developers use to create their own products. Plaid powers the tools millions of people rely on to live a healthier financial life. We work with thousands of companies like Venmo, SoFi, several of the Fortune 500, and many of the largest banks to make it easy for people to connect their financial accounts to the apps and services they want to use. Plaid’s network covers 12,000 financial institutions across the US, Canada, UK and Europe. Founded in 2013, the company is headquartered in San Francisco with offices in New York, Seattle, Washington D.C., Raleigh, London, and Amsterdam. ABOUT THE TEAM: The Security Governance, Risk, and Compliance (GRC) team is part of Plaid’s security organization, focused on enabling the business by proactively managing information security risks and maintaining effective controls. Our mission is to reduce the likelihood and impact of security risks while operating a robust assurance program that builds trust with our customers, consumers, and data partners.We partner closely across the company to ensure Plaid’s platform remains secure, resilient, and aligned with industry and regulatory expectations.Security risk management is how Plaid makes informed security trade-offs—we identify and analyze the risks that could materially affect the business, make sure the right owners decide what to do about them, and turn that picture into reporting leadership and the board can act on. ABOUT THE ROLE: - You will run security risk assessments end-to-end within Plaid’s security risk management program—intake, scenario-based analysis, treatment decisions, and monitoring across security, infrastructure, and product risk. - You will work with engineering SMEs and risk owners on risks ranging from over-privileged access and supply-chain gaps to product abuse and AI adoption, giving owners a clear, defensible basis for accepting or mitigating each one. - You will build quarterly security risk reporting and the security risk content in leadership and board materials. - You will help integrate security risk into enterprise risk management, so it is tracked and weighed alongside the rest of the business. - You will help mature the program as its scope grows, and operate as an AI power user who automates the work so it scales. RESPONSIBILITIES: - Run Security Risk Assessments: Triage intake, run scenario-based risk analyses with engineering SMEs, score initial and residual risk, and drive risk owners to a documented treatment decision. Your analysis turns vague concerns into decisions leadership can stand behind. - Build Quarterly Risk Reporting: Gather updates on material risks, prepare the Security Risk Review, and build the security risk content for executive and board decks. Your reporting gives leadership a clear, current view of where security risk sits and what’s being done about it. - Integrate Security Risk into ERM: Partner with enterprise risk stakeholders to map security risks into the enterprise taxonomy, align rating scales, and keep the registers in sync. Your work puts security risk alongside business risk instead of in a silo. - Mature the Program: Help evolve the risk framework, register, key risk indicators, and risk-owner self-service as the program’s scope grows. Your work moves the program from tracking risks to measuring and reducing them. - Support FedRAMP 20x Risk Decisions: Help make sure unmet FedRAMP rules and KSI gaps carry a documented risk explanation and senior-official acceptance in the Security Decision Record, consistent with the risk register. Your