CSA Security Analyst

Cloud Software Group • San Ramon, CA

8d

About The Position

The Customer Security Assurance (CSA) Security Analyst supports customer security due diligence for Cloud Software Group (Cloud SG), including new, renewal, and annual reviews. This customer-facing role handles security questionnaires, customer calls, assessments, audits, and related security requirements. The analyst works across Sales, Product, Legal, Security, Engineering, Support, IT, and other stakeholders to provide accurate, timely, and approved information about Cloud SG’s security posture and services.

The role requires a strong understanding of cybersecurity controls, cloud and SaaS environments, and compliance expectations. The analyst evaluates customer requests against Cloud SG’s policies, technical implementations, certifications, regulatory obligations, and contractual commitments; identifies risks or gaps; and escalates matters that may require exceptions, remediation, or additional review. The analyst also identifies recurring customer needs, emerging regulations, trends, and documentation gaps, turning them into scalable Trust Center content, standard responses, knowledge articles, process improvements, and automation opportunities.

The position supports customer contract and security-documentation reviews, evidence-based customer audits, and regulatory alignment. It helps stakeholders distinguish regulatory and contractual obligations from certifications, customer preferences, and internal standards, while supporting a sales-enablement approach that avoids unsupported or unintended commitments.

Requirements

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Risk Management, Business, or equivalent experience.
• At least 5 years of experience in cybersecurity, GRC, security engineering, compliance, IT risk, audit, or equivalent experience.
• Customer Security and Trust experience in a complex, multi-product cloud or SaaS corporation, or equivalent third-party/vendor IT risk management experience.
• Experience working with Sales or in a customer-facing capacity, representing company security posture and controls across industry requirements.
• Knowledge of current, new, and upcoming regulations such as GDPR, DORA, CRA, and the EU AI Act.
• Demonstrated experience working with technical and security teams in a technology, SaaS, cloud, or enterprise environment.
• Strong understanding of cybersecurity principles, security controls, risk management, and compliance frameworks.
• Practical experience with one or more frameworks such as ISO 27001, SOC 2, NIST, PCI DSS, FedRAMP, CMMC, ISO 42001, ISO 27701, HIPAA, or similar standards.
• Ability to understand technical architecture, security controls, system configurations, and engineering processes sufficiently to evaluate compliance and risk.
• Strong analytical and problem-solving skills, including investigating complex issues, determining root causes, and defining solutions.
• Excellent written and verbal communication skills.
• Ability to build strong relationships and influence stakeholders across technical and business functions.
• Ability to act as a trusted advisor and help stakeholders understand the intent behind security and compliance requirements.

Nice To Haves

• Professional certification such as CISA, CRISC, CISSP, ISO 27001 Lead Auditor/Implementer, or equivalent.
• Experience with Loopio, Archer, ServiceNow, or similar platforms.
• Experience supporting customer security questionnaires and security assurance activities.
• Familiarity with SIG Core and SIG Lite questionnaires and their requirements.
• Experience working with external regulators, certification bodies, customers, or regulatory assessors.

Responsibilities

• Own assigned Customer Security Assurance requests from intake through completion, ensuring responses are accurate, timely, complete, and appropriately approved.
• Manage and respond to customer security questionnaires, due-diligence requests, RFP/RFI security requirements, customer assessments, and annual security reviews.
• Serve as the primary Security subject matter expert for assigned customer engagements and represent Cloud SG’s security posture professionally.
• Participate in customer security calls, technical discussions, security briefings, due-diligence meetings, and customer audits.
• Explain Cloud SG’s security architecture, controls, policies, certifications, risk management practices, and security operations to technical and non-technical audiences.
• Analyze customer questions to identify underlying security or compliance control requirements and research complex or ambiguous requests with internal subject matter experts.
• Validate that customer responses align with Cloud SG policies, implementations, certifications, regulatory obligations, contractual commitments, and approved security positions; challenge incomplete or unsupported responses and escalate exceptions or commitments as appropriate.
• Develop working knowledge of Cloud SG cloud, SaaS, infrastructure, application, identity, endpoint, network, data protection, monitoring, vulnerability management, incident response, and secure development environments.
• Evaluate customer requirements against implemented controls; identify potential security gaps, control deficiencies, architectural concerns, and exceptions; assess business and customer impact; and support risk-based decisions.
• Apply knowledge of cybersecurity and compliance frameworks and help interpret regulatory requirements in the context of customer security expectations.
• Coordinate customer audit evidence with evidence collected for Compliance or other customer audits, work with subject matter experts on additional requests, and assist with tracking and resolving customer audit findings when Cloud SG has a remediation obligation.
• Review new and renewal customer contracts, security addenda, data protection agreements, questionnaires, and related security documentation for technology-related requirements.
• Coordinate with Legal, Privacy, Security, Product, Engineering, and other stakeholders to assess proposed contractual requirements and identify commitments beyond established policies or capabilities.
• Provide Legal with standardized, approved Security language and technical information, and support negotiation of security requirements with fact-based technical and risk analysis.
• Identify recurring customer requirements, emerging regulatory expectations, security trends, and documentation gaps, and convert them into scalable Trust Center content, standard responses, knowledge articles, process improvements, or automation opportunities.

Benefits

• U.S. employees are typically offered access to healthcare, life insurance and disability benefits, and a 401(k) plan with company match; benefits may vary by employment nature and country.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior