Information Security Analyst

Alteryx; Irvine (CA); On-site; USD 90,000 - 130,000; Full time

Job summary

Alteryx seeks an Information Security Analyst in Security Trust to support security assurance workflows across customer trust, third-party risk, and vendor security reviews. You will handle customer security questionnaires, due diligence, and security documentation, ensuring responses are accurate and aligned with Alteryx's security positions.

The role involves reviewing SOC 1/2, ISO 27001, PCI DSS attestations, and HIPAA documentation, partnering with Sales, Legal, Privacy, and Engineering to

Qualifications

• Bachelor’s degree or equivalent experience.
• 2–5 years in Information Security or related.
• Security certifications (CISSP, CISM, CISA, CCSK, CTPRP) preferred.
• SaaS security experience.
• Familiarity with AWS, Azure, or Google Cloud Platform.
• Experience reviewing security questionnaires and due diligence requests.

Responsibilities

• Respond to customer security questionnaires, vendor assessments, due diligence requests, and requests for security documentation.
• Review security artifacts (SOC 1/2, ISO 27001, PCI DSS attestations, HIPAA security doc).
• Help translate technical security information into clear, audience-appropriate responses for customers and vendors.
• Maintain and improve Trust Center materials, playbooks, and evidence repositories.
• Partner with cross-functional teams to support security reviews across customer and vendor lifecycles.

Skills

Security analysis

Communication

AI tooling

Workflow automation

Stakeholder collaboration

Education

Bachelor's degree or equivalent

Tools

Conveyor

SafeBase

Vanta

Trust Center platforms

AWS/Azure/GCP

Job description

• Reports To: Manager, Security Trust
• The Information Security Analyst, Security Trust supports security assurance workflows across the Information Security organization
• This includes customer security reviews, Trust Center operations, third-party risk assessments, vendor security reviews, security documentation, evidence management, and operational reporting
• The analyst will have the opportunity to develop across multiple areas of Security Trust, with room to grow more deeply into customer trust, third-party risk management, or broader security assurance operations over time
• Support global Security Trust operations across customer trust, third-party risk, and security assurance workflows
• Respond to customer security questionnaires, vendor assessments, due diligence requests, and requests for security documentation
• Ensure customer-facing responses are accurate, evidence-based, consistent with approved messaging, and aligned with Alteryx Security, Legal, Privacy, Product, and Compliance positions
• Translate technical security, privacy, compliance, and product information into clear, accurate, audience-appropriate responses for customers, vendors, and internal stakeholders
• Review security artifacts including SOC 1 and SOC 2 reports, ISO 27001 certifications, PCI DSS attestations, HIPAA security documentation, penetration testing reports, risk assessments, policies, procedures, and security questionnaires
• Help evaluate security risks, document findings, and recommend practical remediation or risk treatment options
• Maintain and improve reusable security content, including Trust Center materials, standard responses, knowledge articles, playbooks, internal documentation, evidence repositories, and AI-enabled knowledge bases
• Partner with Sales, Customer Success, Procurement, Legal, Privacy, Engineering, Product Security, Security Operations, Governance, Risk, and Compliance, and business stakeholders to support security reviews throughout customer and vendor lifecycles
• Track security review status, remediation activities, evidence requests, operational metrics, and workflow performance
• Support internal and external audit readiness by organizing evidence and maintaining accurate security documentation
• Identify opportunities to automate repetitive work, improve self-service, reduce turnaround time, and scale Security Trust operations globally
• Contribute to continuous improvement initiatives across the broader Information Security organization
• Use approved AI tools to accelerate questionnaire completion, vendor assessments, evidence collection, document generation, content maintenance, and security analysis
• Develop reusable prompts, workflows, and knowledge assets that improve consistency and reduce manual effort across the team
• Continuously identify opportunities to automate repetitive work and improve operational efficiency
• Validate AI-generated outputs for technical accuracy, completeness, consistency, and appropriate handling of sensitive information
• Measure and improve the effectiveness of AI-assisted workflows while maintaining human oversight and accountability
• Help drive adoption of AI-enabled processes that improve the experience of customers, vendors, and internal stakeholders

What Success Looks Like:

• Improve response times for customer and vendor security reviews
• Expand reusable Trust Center content
• Mature scalable Security Trust workflows
• Leverage artificial intelligence to reduce manual effort
• Build trusted cross-functional partnerships
• Support a security program that enables business growth while maintaining strong security standards

This role is ideal for someone who enjoys analyzing security information, communicating clearly, improving processes, and using artificial intelligence tools to reduce manual work.

Artificial intelligence is a core part of how the Security Trust team operates and scales. Success in this role requires a passion for leveraging AI to improve productivity, quality, and consistency while maintaining strong security and governance practices.

Strong written, verbal, analytical, and organizational skills.

Demonstrated curiosity and enthusiasm for using AI and automation to improve security operations.

Knowledge of SOC 2, ISO 27001, NIST CSF, NIST SP 800-53, PCI DSS, and HIPAA Security Rule.

Experience reviewing or responding to security questionnaires, due diligence requests, or vendor assessments.

Bachelor’s degree or equivalent experience.

2 to 5 years of experience in Information Security, Security Assurance, Customer Trust, Third Party Risk Management, Governance, Risk, and Compliance, or a related discipline.

Relevant security certifications (CISSP, CISM, CISA, CCSK, CTPRP).

SaaS security experience.

Familiarity with AWS, Azure, or Google Cloud Platform.

Experience with Conveyor, SafeBase, Vanta, or similar Trust Center platforms.

Experience with third-party risk management platforms.

Experience using artificial intelligence and workflow automation in security operations.