Sr. Security & Risk Analyst, Operational Risk & BCDR - 10980

Coupa makes margins multiply through its community-generated AI and industry-leading total spend management platform for businesses large and small. Coupa AI is informed by trillions of dollars of direct and indirect spend data across a global network of 10M+ buyers and suppliers. We empower you with the ability to predict, prescribe, and automate smarter, more profitable business decisions to improve operating margins.

Why join Coupa?

• Pioneering Technology: At Coupa, we're at the forefront of innovation, leveraging the latest technology to empower our customers with greater efficiency and visibility in their spend.
• Collaborative Culture: We value collaboration and teamwork, and our culture is driven by transparency, openness, and a shared commitment to excellence.
• Global Impact: Join a company where your work has a global, measurable impact on our clients, the business, and each other.

Learn more on Life at Coupa blog and hear from our employees about their experiences working at Coupa.

The Impact of a Sr. Security & Risk Analyst - Operational Risk & BCDR at Coupa:

The Sr. Security & Risk Analyst is a professional-level contributor responsible for maturing Coupa's operational risk, product risk, and business continuity capabilities. This role provides expert-level analysis, coordination, and risk evaluation across technology, product, AI, security, and operational domains.

As a P-level contributor, this analyst independently drives risk assessments, partners cross-functionally to analyze complex systems, influences risk decisions, and ensures that risk and resilience processes operate predictably and consistently. This role requires strong technical understanding, analytical depth, and the ability to turn complex information into actionable recommendations for leadership.

What You'll Do:

• Manage the Operational Risk Register, including intake, scoring, validation, remediation tracking, and monthly reporting.
• Conduct deep-dive risk assessments across cybersecurity, product, cloud, data governance, infrastructure, and business operations.
• Lead SME risk-scoring discussions and partner with risk owners to monitor residual risk, mitigation progress, and emerging trends.
• Perform detailed security and risk evaluations for product features, architecture changes, AI/ML models, and system integrations, delivering clear risk review reports.
• Collaborate with Product, Engineering, AI, Security, Privacy, and Legal to embed risk early and enhance assessment criteria, tools, and processes.
• Support and mature the BCDR program by coordinating BIAs, facilitating exercises/tests, documenting results, and maintaining core continuity and recovery plans.

• 3-6 years of experience in security risk management, product risk, GRC, cybersecurity, business continuity, or audit.
• Strong understanding of cloud technologies (AWS preferred), SaaS environments, and modern product/solution architectures.
• Hands-on experience conducting technical risk assessments across security, privacy, compliance, architecture, and/or cloud domains.
• Working knowledge of BCDR practices, including BIAs, recovery strategies, testing, and operational resilience principles.
• Familiarity with industry frameworks such as NIST CSF, ISO 27001/27701, SOC 2, PCI DSS, or comparable standards.
• Excellent analytical and written communication skills, with the ability to clearly convey complex risks and engage effectively with senior engineers, architects, and product leaders.