Senior Security Assurance Analyst

Airbnb was born in 2007 when two hosts welcomed three guests to their San Francisco home, and has since grown to over 5 million hosts who have welcomed over 2 billion guest arrivals in almost every country across the globe. Every day, hosts offer unique stays and experiences that make it possible for guests to connect with communities in a more authentic way.

The Community You Will Join:
The Security Assurance team at Airbnb focuses on Governance, Risk, and Compliance within the Information Security Organization, ensuring security controls are robust and aligned with our global commitments. We bridge the gap between engineering and auditors by translating technical solutions into compliance-ready outcomes. Collaborating with auditors, regulators, business partners, and engineering teams, we navigate complex regulatory landscapes, champion best practices, and maintain world-class security standards across every region Airbnb operates.
Our commitment is to uphold Airbnb’s reputation as a trusted platform by meeting compliance requirements and continuously strengthening our security posture.
As a key member of the Security Assurance team, you will play an essential role in maintaining and elevating Airbnb’s security posture. you’ll partner with cross-functional teams across Airbnb, working together to strengthen our security practices and protect the trust our community places in us.
Participate in building a comprehensive compliance program, ensuring Airbnb meets requirements for compliance frameworks such as PCI.
Address security posture-related questionnaires to support ongoing compliance initiatives.
Collaborate with external and internal auditors to assist with the Test of Design and Test of Effectiveness processes.
Collaborate with stakeholders to understand operational needs and deliver realistic, risk-based recommendations for remediation.
Monitor remediation activities and build metrics and reports on testing/remediation results
6+ Years of hands-on experience in Information Security Assurance, Governance, Risk and Compliance
~ Deep understanding and working experience of regulatory frameworks (PCI DSS, SOX, DORA, DFS 500)
~ Strong understanding of security foundations to be able to effectively respond to partner security posture questionnaires
~ Skilled in developing and implementing security controls and InfoSec policies
~ Experience with risk-based approach in evaluating security weaknesses
~ able to articulate security controls and business impacts across various stakeholders.
~ Experienced in streamlining compliance processes, automating manual workflows, and managing audit readiness
~ Experience with AWS, Github, Asana and Microservices preferred.
~ Bachelor’s degree in Computer Science, Information Systems or related degree, Master’s degree preferred

This position is US - Remote Eligible. The role may include occasional work at an Airbnb office or attendance at offsites, as agreed to with your manager. While the position is Remote Eligible, you must live in a state where Airbnb, Inc. has a registered entity. This list is continuously evolving, so please check back with us if the state you live in is on the exclusion list. Our Commitment To Inclusion & Belonging:
We strive to also provide a disability inclusive application and interview process. If you are a candidate with a disability and require reasonable accommodation in order to submit an application, please contact us at: ask that you only reach out to us if you are a candidate whose disability prevents you from being able to complete our online application.
The actual base pay is dependent upon many factors, such as: training, transferable skills, work experience, business needs and market demands. This role may also be eligible for bonus, equity, benefits, and Employee Travel Credits.
Reasonable Accommodations:

We are committed to providing reasonable accommodations throughout the recruitment process for applicants with disabilities. A Note on Recruiting Scams:

Scammers sometimes pose as Airbnb recruiters to get money or personal information from candidates. Our recruiters will never ask for your Social Security number, bank account details, passport, or payment app information while you are interviewing. We’ll also never ask you to pay a fee, send money, deposit or cash a check, or purchase work-related equipment (such as a company laptop) during the interview process.