Information Security Analyst

VulnU; Columbia (MD); Hybrid; USD 81,000 - 107,000; Full time

Benefits offered by this job

Paid parental leave

Retirement match

Equity

Job summary

Tenable is seeking an Information Security Mid Risk and Compliance Analyst to drive third-party risk management, assessments, and audits. You will work with Sales, Engineering, and Product teams to communicate compliance obligations and support remediation efforts, audits, and certifications.

Responsibilities include managing TPRA for vendors, educating stakeholders, coordinating audit walkthroughs, and helping build and monitor internal security controls. Hybrid role based at Columbia, MD HQ.

Qualifications

• 4+ years of information security and vendor risk assessments.
• 4+ years experience responding to security assessments, SAQs, and compliance requirements.
• 4+ years of experience with control processes, documentation, and remediation items.
• Experience with FedRAMP.
• Strong communication and collaboration skills across levels.
• Analytical mindset with practical security risk view.
• Proficient in Excel, PowerPoint, and Visio.
• Knowledge of GRC frameworks (GRC).
• Certifications such as SSCP, Sec+, CISA are a plus.
• Big 4 or similar security consulting/risk assurance experience.

Responsibilities

• Serve as a company representative for security questionnaires, assessments, and audits with prospects, customers, and partners.
• Collaborate with Sales, Engineering, Information Security, IT, and Product Development to communicate compliance obligations.
• Complete Third-Party Risk Assessments (TPRM) for new and potential vendors.
• Educate stakeholders on responsibilities.
• Coordinate and participate in internal and external audit walkthroughs.
• Remediate issues identified during third-party assurance or internal reviews.
• Support internal compliance program development and audits, risk assessments, and certifications.
• Assist in development, administration, and monitoring of internal security controls.

Skills

Vendor risk assessments

Security assessments

Audit coordination

FedRAMP

Communication

Excel

PowerPoint

Visio

Education

BS/BA in IT, CS, Information Security, or related field

Tools

Excel

PowerPoint

Visio

Job description

# Information Security AnalystTenable · tenable.comCategory: Security EngineeringLocation: US - Headquarters - Maryland - Columbia## Quality of lifeWhat the posting states. Hover or tap a perk to see the line it came from.* Paid parental leave* Retirement match* EquityWho is Tenable?Tenable is the Exposure Management company. Over 40,000 organizations around the globe rely on Tenable to understand and reduce cyber risk. Our global employees support 65 percent of the Fortune 500, 50 percent of the Global 2000, and large government agencies. Come be part of our journey!What makes Tenable such a great place to work?Ask a member of our team and they’ll answer, “Our people!” We work together to build and innovate best-in-class cybersecurity solutions for our customers; all while creating a culture of belonging, respect, and excellence where we can be our best selves. When you’re part of our #OneTenable team, you can expect to partner with some of the most talented and passionate people in the industry, and have the support and resources you need to do work that truly matters. We deliver results that exceed expectations and we win together!Your Role:Join our InfoSec team at Tenable as a hands-on Mid Risk and Compliance Analyst. Drive compliance and assurance efforts for our products and cloud services while assisting with external risk assessments, security assessments, and audits. Make a real impact on our organization's security and customer trust and come join us at Tenable!Your Opportunity:Serve as a company representative with prospects, customers, and partners for security questionnaires, assessments, and auditsCollaborate with Sales, Engineering, Information Security, IT, and Product Development teams to communicate compliance obligations and requirementsComplete Third-Party Risk Assessments (TPRM Program) for new and potential vendorsEducate stakeholders on their responsibilitiesCoordinate and participate in internal and external audit walkthroughsHelp guide and perform remediation of issues identified during third-party assurance or internal reviewsSupport special projects as needed, which may include:Assisting in the development and execution of the internal compliance program, involving preparation for audits, certifications, and risk assessments.Assisting in the development, administration, and continuous monitoring of internal security controls.What You'll Need:Able to work hybrid/onsite location at HQ in Columbia MD. This position is US-based only4+ years of experience performing information security and vendor risk assessments based upon industry accepted standards4+ years of experience in responding to security assessments, SAQs, compliance requirements, etc4+ years of experience with implementation, monitoring, and reporting of control processes, documentation, and remediation itemsExperience working with the Federal Risk and Authorization Management Program (FedRAMP)Be self-driven with the ability to work independently and comprehend all requirementsStrong communication skills and ability to collaborate effectively with all levelsAnalytical mindset with a rational, pragmatic, and realistic approach to security, risk, and complianceAbility to adopt and utilize technology, with advanced proficiency in Excel, PowerPoint, and Vizio.And Ideally:Knowledge of governance, risk and compliance frameworks (GRC)Experience performing or undergoing internal and external auditsRelevant security certifications (SSCP, Sec+, CISA, etc)Experience in a Big 4 or similar security consulting or risk assurance roleExperience with conducting audits, privacy, BC DR Program ManagementBS, BA in Information Technology, Computer Science, Information Security, or other related field#LI-Hybrid #LI-MM1This is the base pay range for this position. Compensation for the role will depend on a number of factors, including the candidate's qualifications, skills, competencies, location and experience, and may fall outside of the range shown. Employees are also eligible for variable compensation in addition to base pay (commission for sales roles, bonus for non-sales roles), depending on company and individual performance. Tenable also offers a variety of comprehensive and competitive benefits which include: medical, dental, vision, disability and life insurance; 401(k) retirement savings with company match; an employee stock purchase plan; an employee referral program; flexible spending accounts; an Employee Assistance Program (EAP); education assistance; parental leave; paid time off (PTO); company-paid holidays; health and wellness events; and community programs.US Pay Range$80,500 $107,166.67 USDWe’re committed to promoting Equal Employment Opportunity (EEO) at Tenable - through all equal employment opportunity laws and regulations at the international, federal, state and local levels. If you need a reasonable accommodation due to a disability during the application or recruiting process, please contact [e-mail] for further assistance.