Information Security Analyst

Tenable, Inc.; Ellicott City (MD); Hybrid; USD 81,000 - 107,000; Full time

Job summary

Tenable, Inc. is seeking a hands-on Mid Risk and Compliance Analyst to drive compliance efforts for products and cloud services.

You will contribute to external risk assessments, security assessments, and audits, collaborating with Sales, Engineering, and Product teams to ensure compliance obligations are met. You will participate in Third-Party Risk Assessments, educate stakeholders, and help remediate findings while supporting internal audits and ongoing security controls development.

Qualifications

• 4+ years of information security and vendor risk assessments.
• 4+ years of responding to security assessments, SAQs, and compliance requirements.
• 4+ years of implementing, monitoring, and reporting control processes and remediation items.

Responsibilities

• Serve as a company representative with prospects, customers, and partners for security questionnaires, assessments, and audits.
• Collaborate with Sales, Engineering, Information Security, IT, and Product Development teams to communicate compliance obligations and requirements.
• Complete Third-Party Risk Assessments (TPRM) for new and potential vendors.
• Educate stakeholders on their responsibilities.
• Coordinate and participate in internal and external audit walkthroughs.
• Help guide and perform remediation of issues identified during third-party assurance or internal reviews.
• Support special projects including internal compliance programs and monitoring of internal security controls.

Skills

InfoSec risk assessments

Security assessments responses

Vendor risk assessments

Audits coordination

Strong communication

Excel proficiency

PowerPoint proficiency

FedRAMP experience

Education

BS in IT/CS/InfoSec or related field

Job description

Tenable® is the Exposure Management company. Over 40,000 organizations around the globe rely on Tenable to understand and reduce cyber risk. Our global employees support 65 percent of the Fortune 500, 50 percent of the Global 2000, and large government agencies. Come be part of our journey!

What makes Tenable such a great place to work?

Ask a member of our team and they'll answer, "Our people!" We work together to build and innovate best-in-class cybersecurity solutions for our customers; all while creating a culture of belonging, respect, and excellence where we can be our best selves. When you're part of our #OneTenable team, you can expect to partner with some of the most talented and passionate people in the industry, and have the support and resources you need to do work that truly matters. We deliver results that exceed expectations and we win together!

Your Role:

Join our InfoSec team at Tenable as a hands-on Mid Risk and Compliance Analyst. Drive compliance and assurance efforts for our products and cloud services while assisting with external risk assessments, security assessments, and audits. Make a real impact on our organization's security and customer trust and come join us at Tenable!

• Serve as a company representative with prospects, customers, and partners for security questionnaires, assessments, and audits
• Collaborate with Sales, Engineering, Information Security, IT, and Product Development teams to communicate compliance obligations and requirements
• Complete Third-Party Risk Assessments (TPRM Program) for new and potential vendors
• Educate stakeholders on their responsibilities
• Coordinate and participate in internal and external audit walkthroughs
• Help guide and perform remediation of issues identified during third-party assurance or internal reviews
• Support special projects as needed, which may include:
  • Assisting in the development and execution of the internal compliance program, involving preparation for audits, certifications, and risk assessments.
  • Assisting in the development, administration, and continuous monitoring of internal security controls.

What You'll Need:

• Able to work hybrid/onsite location at HQ in Columbia MD. This position is US-based only
• 4+ years of experience performing information security and vendor risk assessments based upon industry accepted standards
• 4+ years of experience in responding to security assessments, SAQs, compliance requirements, etc
• 4+ years of experience with implementation, monitoring, and reporting of control processes, documentation, and remediation items
• Experience working with the Federal Risk and Authorization Management Program (FedRAMP)
• Be self-driven with the ability to work independently and comprehend all requirements
• Strong communication skills and ability to collaborate effectively with all levels
• Analytical mindset with a rational, pragmatic, and realistic approach to security, risk, and compliance
• Ability to adopt and utilize technology, with advanced proficiency in Excel, PowerPoint, and Vizio.

And Ideally:

• Knowledge of governance, risk and compliance frameworks (GRC)
• Experience performing or undergoing internal and external audits
• Relevant security certifications (SSCP, Sec+, CISA, etc)
• Experience in a Big 4 or similar security consulting or risk assurance role
• Experience with conducting audits, privacy, BC & DR Program Management
• BS, BA in Information Technology, Computer Science, Information Security, or other related field

#LI-Hybrid #LI-MM1

This is the base pay range for this position. Compensation for the role will depend on a number of factors, including the candidate's qualifications, skills, competencies, location and experience, and may fall outside of the range shown. Employees are also eligible for variable compensation in addition to base pay (commission for sales roles, bonus for non-sales roles), depending on company and individual performance. Tenable also offers a variety of comprehensive and competitive benefits which include: medical, dental, vision, disability and life insurance; 401(k) retirement savings with company match; an employee stock purchase plan; an employee referral program; flexible spending accounts; an Employee Assistance Program (EAP); education assistance; parental leave; paid time off (PTO); company-paid holidays; health and wellness events; and community programs.

US Pay Range

$80,500 - $107,166.67 USD

We're committed to promoting Equal Employment Opportunity (EEO) at Tenable - through all equal employment opportunity laws and regulations at the international, federal, state and local levels. If you need a reasonable accommodation due to a disability during the application or recruiting process, please contact [e-mail] for further assistance.

Tenable Data Consent Statement

Tenable is committed to protecting the privacy and security of your personal data. Depending on your location, one or more of the following notices may apply to you:

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiringprocess or thereafter. Any information that you do provide will be recorded and maintained in aconfidential file.

As set forth in Tenable, Inc.'s Equal Employment Opportunity policy,we do not discriminate on the basis of any protected group status under any applicable law.

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measurethe effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categoriesis as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.

We use Greenhouse's AI-powered Talent Matching tool to compare your application against our job requirements.