Information Security Analyst

Your Role:

Join our InfoSec team at Tenable as a hands-on Mid Risk and Compliance Analyst. Drive compliance and assurance efforts for our products and cloud services while assisting with external risk assessments, security assessments, and audits. Make a real impact on our organization's security and customer trust and come join us at Tenable!

Your Opportunity:

• Serve as a company representative with prospects, customers, and partners for security questionnaires, assessments, and audits
• Collaborate with Sales, Engineering, Information Security, IT, and Product Development teams to communicate compliance obligations and requirements
• Complete Third-Party Risk Assessments (TPRM Program) for new and potential vendors
• Educate stakeholders on their responsibilities
• Coordinate and participate in internal and external audit walkthroughs
• Help guide and perform remediation of issues identified during third-party assurance or internal reviews
• Support special projects as needed, which may include:
  • Assisting in the development and execution of the internal compliance program, involving preparation for audits, certifications, and risk assessments.
  • Assisting in the development, administration, and continuous monitoring of internal security controls.

What You'll Need:

• Able to work hybrid/onsite location at HQ in Columbia MD. This position is US-based only
• 4+ years of experience performing information security and vendor risk assessments based upon industry accepted standards
• 4+ years of experience in responding to security assessments, SAQs, compliance requirements, etc
• 4+ years of experience with implementation, monitoring, and reporting of control processes, documentation, and remediation items
• Experience working with the Federal Risk and Authorization Management Program (FedRAMP)
• Be self-driven with the ability to work independently and comprehend all requirements
• Strong communication skills and ability to collaborate effectively with all levels
• Analytical mindset with a rational, pragmatic, and realistic approach to security, risk, and compliance
• Ability to adopt and utilize technology, with advanced proficiency in Excel, PowerPoint, and Vizio.

And Ideally:

• Knowledge of governance, risk and compliance frameworks (GRC)
• Experience performing or undergoing internal and external audits
• Relevant security certifications (SSCP, Sec+, CISA, etc)
• Experience in a Big 4 or similar security consulting or risk assurance role
• Experience with conducting audits, privacy, BC & DR Program Management
• BS, BA in Information Technology, Computer Science, Information Security, or other related field

#LI-Hybrid #LI-MM1