InfoSec Analyst - Business Enablement

Elastic; Portugal; Remote; EUR 42,000 - 64,000; Full time

Job summary

Elastic is seeking an InfoSec Analyst to join the Business Enablement team within Information Security. You will manage customer security requests, own the Trust Center, and improve security documentation for customers across certifications and policies.

You will design AI-assisted workflows, work with Sales and other teams, and help communicate security posture (SOC 2, ISO 27001, FedRAMP, CSA STAR) to customers and internal teams. This position supports a globally distributed organization.

Qualifications

• Experience in security GRC, customer trust, security assurance or a similar function, including answering security questionnaires, RFPs or due diligence requests.

Responsibilities

• Handle customer security requests such as RFPs, RFIs, security questionnaires and due diligence, and route questions that need other teams’ expertise to the right owners.
• Own our Trust Center. Ensure the content and security documentation for customers are accurate and up-to-date. Make it easy to navigate. This includes certifications, attestations, policies, and other customer materials.
• Analyze incoming customer inquiries to spot recurring questions and gaps, and turn them into proposed updates to the Trust Center and customer artifacts.
• Triage the team’s internal request queue, including product security-related tickets and CVE-related requests.
• Design and build AI-assisted workflows, automation and process improvements that make the team faster and more scalable, with a focus on customer-centricity and self-service.
• Explain the company’s security posture and compliance (e.g., SOC 2, ISO 27001, FedRAMP, CSA STAR) in clear terms to customers and internal teams.
• Provide security policy guidance to employees, collaborators and partners.
• Balance day-to-day operational work with project and creative work.
• Learn the company’s technical environment, products, business processes and culture, and bring that understanding into your work.

Skills

Security GRC

Customer trust

Security assurance

RFPs/Due diligence

Security questionnaires

Job description

the company, the Search AI Company, enables everyone to find the answers they need in real time, using all their data, at scale — unleashing the potential of businesses and people. The the company Search AI Platform, used by more than 50% of the Fortune 500, brings together the precision of search and the intelligence of AI to enable everyone to accelerate the results that matter. By taking advantage of all structured and unstructured data — securing and protecting private information more effectively — the company’s complete, cloud-based solutions for search, security, and observability help organizations deliver on the promise of AI.

What Is The Role :

We’re hiring an InfoSec Analyst to join the Business Enablement team within Information Security (InfoSec). InfoSec manages the security strategy, policy, and programs for the entire company. This includes risk management, compliance, security controls, threat prevention and detection, and incident response.

All of this work occurs in a globally distributed company. In this role you’ll help the company win and keep customer trust, and you’ll support the security requests and vulnerability work that come through the team’s queues. You’ll work closely with Sales, one of your biggest partners, along with Solution Architects, Support, Legal, Engineering and other InfoSec teams, using AI and automation to do this work faster and with a focus on what customers actually need.

What You Will Be Doing :

• Handle customer security requests such as RFPs, RFIs, security questionnaires and due diligence, and route questions that need other teams’ expertise to the right owners.
• Own our Trust Center. Ensure the content and security documentation for customers are accurate and up-to-date. Make it easy to navigate. This includes certifications, attestations, policies, and other customer materials.
• Analyze incoming customer inquiries to spot recurring questions and gaps, and turn them into proposed updates to the Trust Center and customer artifacts.
• Triage the team’s internal request queue, including product security-related tickets and CVE-related requests.
• Design and build AI-assisted workflows, automation and process improvements that make the team faster and more scalable, with a focus on customer-centricity and self-service.
• Explain the company’s security posture and compliance (e.g., SOC 2, ISO 27001, FedRAMP, CSA STAR) in clear terms to customers and internal teams.
• Provide security policy guidance to employees, collaborators and partners.
• Balance day-to-day operational work with project and creative work.
• Learn the company’s technical environment, products, business processes and culture, and bring that understanding into your work.

What You Bring :

• Experience in security GRC, customer trust, security assurance or a similar function, including answering security questionnaires, RFPs or due diligence requests.
• Working knowledge of se