Information Security Analyst

Alteryx•Irvine, CA

2d•$121,000 - $132,000•Remote

About The Position

The Information Security Analyst, Security Trust supports security assurance workflows across the Information Security organization. This includes customer security reviews, Trust Center operations, third-party risk assessments, vendor security reviews, security documentation, evidence management, and operational reporting. This role is ideal for someone who enjoys analyzing security information, communicating clearly, improving processes, and using artificial intelligence tools to reduce manual work. The analyst will have the opportunity to develop across multiple areas of Security Trust, with room to grow more deeply into customer trust, third-party risk management, or broader security assurance operations over time.

Requirements

Bachelor's degree or equivalent experience.
2 to 5 years of experience in Information Security, Security Assurance, Customer Trust, Third Party Risk Management, Governance, Risk, and Compliance, or a related discipline.
Experience reviewing or responding to security questionnaires, due diligence requests, or vendor assessments.
Knowledge of SOC 2, ISO 27001, NIST CSF, NIST SP 800-53, PCI DSS, and HIPAA Security Rule.
Strong written, verbal, analytical, and organizational skills.
Demonstrated curiosity and enthusiasm for using AI and automation to improve security operations.

Nice To Haves

SaaS security experience.
Experience with Conveyor, SafeBase, Vanta, or similar Trust Center platforms.
Experience with third-party risk management platforms.
Familiarity with AWS, Azure, or Google Cloud Platform.
Experience using artificial intelligence and workflow automation in security operations.
Relevant security certifications (CISSP, CISM, CISA, CCSK, CTPRP).

Responsibilities

Support global Security Trust operations across customer trust, third-party risk, and security assurance workflows.
Respond to customer security questionnaires, vendor assessments, due diligence requests, and requests for security documentation.
Ensure customer-facing responses are accurate, evidence-based, consistent with approved messaging, and aligned with Alteryx Security, Legal, Privacy, Product, and Compliance positions.
Translate technical security, privacy, compliance, and product information into clear, accurate, audience-appropriate responses for customers, vendors, and internal stakeholders.
Review security artifacts including SOC 1 and SOC 2 reports, ISO 27001 certifications, PCI DSS attestations, HIPAA security documentation, penetration testing reports, risk assessments, policies, procedures, and security questionnaires.
Help evaluate security risks, document findings, and recommend practical remediation or risk treatment options.
Maintain and improve reusable security content, including Trust Center materials, standard responses, knowledge articles, playbooks, internal documentation, evidence repositories, and AI-enabled knowledge bases.
Partner with Sales, Customer Success, Procurement, Legal, Privacy, Engineering, Product Security, Security Operations, Governance, Risk, and Compliance, and business stakeholders to support security reviews throughout customer and vendor lifecycles.
Track security review status, remediation activities, evidence requests, operational metrics, and workflow performance.
Support internal and external audit readiness by organizing evidence and maintaining accurate security documentation.
Identify opportunities to automate repetitive work, improve self-service, reduce turnaround time, and scale Security Trust operations globally.
Contribute to continuous improvement initiatives across the broader Information Security organization.
Use approved AI tools to accelerate questionnaire completion, vendor assessments, evidence collection, document generation, content maintenance, and security analysis.
Develop reusable prompts, workflows, and knowledge assets that improve consistency and reduce manual effort across the team.
Continuously identify opportunities to automate repetitive work and improve operational efficiency.
Validate AI-generated outputs for technical accuracy, completeness, consistency, and appropriate handling of sensitive information.
Measure and improve the effectiveness of AI-assisted workflows while maintaining human oversight and accountability.
Help drive adoption of AI-enabled processes that improve the experience of customers, vendors, and internal stakeholders.