Hybrid InfoSec Risk & Compliance Analyst

Tenable, Inc.; Ellicott City (MD); Hybrid; USD 81,000 - 107,000; Full time

Job summary

Tenable, Inc. is seeking a hands-on Mid Risk and Compliance Analyst to drive compliance efforts for products and cloud services.

You will contribute to external risk assessments, security assessments, and audits, collaborating with Sales, Engineering, and Product teams to ensure compliance obligations are met. You will participate in Third-Party Risk Assessments, educate stakeholders, and help remediate findings while supporting internal audits and ongoing security controls development.

Qualifications

• 4+ years of information security and vendor risk assessments.
• 4+ years of responding to security assessments, SAQs, and compliance requirements.
• 4+ years of implementing, monitoring, and reporting control processes and remediation items.

Responsibilities

• Serve as a company representative with prospects, customers, and partners for security questionnaires, assessments, and audits.
• Collaborate with Sales, Engineering, Information Security, IT, and Product Development teams to communicate compliance obligations and requirements.
• Complete Third-Party Risk Assessments (TPRM) for new and potential vendors.
• Educate stakeholders on their responsibilities.
• Coordinate and participate in internal and external audit walkthroughs.
• Help guide and perform remediation of issues identified during third-party assurance or internal reviews.
• Support special projects including internal compliance programs and monitoring of internal security controls.

Skills

InfoSec risk assessments

Security assessments responses

Vendor risk assessments

Audits coordination

Strong communication

Excel proficiency

PowerPoint proficiency

FedRAMP experience

Education

BS in IT/CS/InfoSec or related field

Job description

Tenable, Inc. is seeking a hands-on Mid Risk and Compliance Analyst to drive compliance efforts for products and cloud services.

You will contribute to external risk assessments, security assessments, and audits, collaborating with Sales, Engineering, and Product teams to ensure compliance obligations are met. You will participate in Third-Party Risk Assessments, educate stakeholders, and help remediate findings while supporting internal audits and ongoing security controls development.