The opportunity
Airbnb was born in 2007 when two hosts welcomed three guests to their San Francisco home, and has since grown to over 5 million hosts who have welcomed over 2 billion guest arrivals in almost every country across the globe. Every day, hosts offer unique stays and experiences…
What they're looking for
- Design and own the CS Risk Appetite Framework: define guardrails, escalation triggers, and pre-approved response actions. This is not a documentation exercise; it requires continuous negotiation with senior leaders and cross-functional partners to calibrate organizational tolerance in a rapidly changing threat environment.
- Own and evolve the CS Risk Registry as a living strategic instrument. Your: job is to challenge what gets prioritized, determine whether risk scores reflect reality, identify risks that automated systems miss entirely (e.g., emergent social engineering tactics, regulatory shifts, insider collusion patterns), and ensure accountability for remediation.
- Develop and stress-test risk assessment standards: including key risk indicators (KRIs), risk typologies, and emerging threat hypotheses. Critically evaluate whether existing KRIs remain meaningful or whether they have become stale proxies that create false confidence.
- Support the evolution of models and processes used in detection triage and: investigation — not by building models, but by interrogating model assumptions and sources of risk.