Information Security Vendor Compliance and Customer Risk Analyst

Forescout Technologies Inc.

About The Position

Forescout is seeking an Information Security Vendor Compliance and Customer Risk Analyst to support its vendor risk management and customer RFx security inquiry programs. The analyst will work with the compliance team as a subject matter expert on vendor risk management and customer RFx security inquiries. The position also supports compliance audits, program improvements, and procurement activities for the Operations and Compliance teams.

Requirements

An associate or bachelor's degree in Information Security, Information Assurance, or a similar field, or at least 1 year of experience in an information security role supporting a corporate information security vendor management or customer RFx program, or in a procurement role.
Working understanding of information security supply chain concerns, customer due-diligence questionnaires, and compliance frameworks.
Novice-level understanding of SOC 2, ISO 27001, NIST 800-171/53, or similar security standards.
Ability to work in a fast-paced environment where priorities may shift with business needs.
Ability to create and maintain documentation.
Ability to communicate complex information security risks and scenarios to a general audience.
Ability to work with minimal supervision and demonstrate self-motivation.
Ability to prioritize, work independently, and manage multiple projects.
Strong verbal and written communication skills.

Nice To Haves

FedRAMP exposure.
Hands-on experience with vendor risk management tools such as OneTrust, UpGuard, BitSight, and SecurityScorecard.

Responsibilities

Review information security documentation from proposed and current vendors.
Identify inadequacies or risks associated with using vendors.
Evaluate vendors using tools such as OneTrust and UpGuard.
Work directly with vendors to obtain missing or required information.
Collaborate with Sales, Deal Desk, and customers to answer customer RFx security questionnaires.
Work with compliance and operations team members to produce evidence for compliance audits.
Help refine the vendor management and customer RFx programs with the compliance team.
Work with procurement to enter purchase requests and track purchase orders for the Operations and Compliance teams.

Benefits

Competitive compensation and benefits.
Company covers 85% of employee and dependent health care premiums.
100% company-paid employee life and disability insurance premiums.
401(k) match.
Generous flexible time off for U.S. employees.
Voluntary life, accident, and critical illness insurance options.
Employee assistance program.
Maternity and parental bonding leave.
Collaborative, innovative work environment.
Support for employee development, career progression, and opportunities to do their best work.