Information Security Analyst
About The Position
Tenable is hiring a hands-on Mid Risk and Compliance Analyst to join its Information Security team. The role supports compliance and assurance efforts for Tenable products and cloud services, and contributes to external risk assessments, security assessments, and audits. The analyst represents the company in security questionnaires, assessments, and audits; coordinates with internal teams and external stakeholders; and helps maintain and improve internal compliance programs and security controls. The position is US-based and requires hybrid or onsite work at Tenable’s headquarters in Columbia, Maryland.
Requirements
- At least 4 years of experience performing information security and vendor risk assessments based on industry-accepted standards.
- At least 4 years of experience responding to security assessments, SAQs, and compliance requirements.
- At least 4 years of experience implementing, monitoring, and reporting on control processes, documentation, and remediation items.
- Experience working with the Federal Risk and Authorization Management Program (FedRAMP).
- Self-driven, able to work independently, and able to comprehend requirements.
- Strong communication skills and ability to collaborate effectively with all levels.
- Analytical mindset with a rational, pragmatic, and realistic approach to security, risk, and compliance.
- Ability to adopt and utilize technology, with advanced proficiency in Excel, PowerPoint, and Visio.
- Able to work hybrid or onsite at the headquarters in Columbia, Maryland; position is US-based only.
Nice To Haves
- Knowledge of governance, risk, and compliance (GRC) frameworks.
- Experience performing or undergoing internal and external audits.
- Relevant security certifications such as SSCP, Security+, or CISA.
- Experience in a Big Four or similar security consulting or risk assurance role.
- Experience conducting audits and experience with privacy and business continuity and disaster recovery (BC & DR) program management.
- Bachelor of Science or Bachelor of Arts in Information Technology, Computer Science, Information Security, or another related field.
Responsibilities
- Represent Tenable with prospects, customers, and partners in security questionnaires, assessments, and audits.
- Collaborate with Sales, Engineering, Information Security, IT, and Product Development teams to communicate compliance obligations and requirements.
- Complete third-party risk assessments for new and potential vendors.
- Educate stakeholders on their responsibilities.
- Coordinate and participate in internal and external audit walkthroughs.
- Help guide and perform remediation of issues identified during third-party assurance or internal reviews.
- Assist with developing and executing the internal compliance program, including preparation for audits, certifications, and risk assessments.
- Assist with developing, administering, and continuously monitoring internal security controls.
- Support special projects as needed.
Benefits
- Medical, dental, vision, disability, and life insurance
- 401(k) retirement savings with company match
- Employee stock purchase plan
- Employee referral program
- Flexible spending accounts
- Employee Assistance Program (EAP)
- Education assistance
- Parental leave
- Paid time off (PTO)
- Company-paid holidays
- Health and wellness events
- Community programs
- Variable compensation, including bonuses for non-sales roles, depending on company and individual performance
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
Education Level
No Education Listed
