Risk & Compliance Security Analyst (Hybrid—Columbia, MD)

VulnU; Columbia (MD); Hybrid; USD 81,000 - 107,000; Full time

Benefits offered by this job

Paid parental leave

Retirement match

Equity

Job summary

Tenable is seeking an Information Security Mid Risk and Compliance Analyst to drive third-party risk management, assessments, and audits. You will work with Sales, Engineering, and Product teams to communicate compliance obligations and support remediation efforts, audits, and certifications.

Responsibilities include managing TPRA for vendors, educating stakeholders, coordinating audit walkthroughs, and helping build and monitor internal security controls. Hybrid role based at Columbia, MD HQ.

Qualifications

• 4+ years of information security and vendor risk assessments.
• 4+ years experience responding to security assessments, SAQs, and compliance requirements.
• 4+ years of experience with control processes, documentation, and remediation items.
• Experience with FedRAMP.
• Strong communication and collaboration skills across levels.
• Analytical mindset with practical security risk view.
• Proficient in Excel, PowerPoint, and Visio.
• Knowledge of GRC frameworks (GRC).
• Certifications such as SSCP, Sec+, CISA are a plus.
• Big 4 or similar security consulting/risk assurance experience.

Responsibilities

• Serve as a company representative for security questionnaires, assessments, and audits with prospects, customers, and partners.
• Collaborate with Sales, Engineering, Information Security, IT, and Product Development to communicate compliance obligations.
• Complete Third-Party Risk Assessments (TPRM) for new and potential vendors.
• Educate stakeholders on responsibilities.
• Coordinate and participate in internal and external audit walkthroughs.
• Remediate issues identified during third-party assurance or internal reviews.
• Support internal compliance program development and audits, risk assessments, and certifications.
• Assist in development, administration, and monitoring of internal security controls.

Skills

Vendor risk assessments

Security assessments

Audit coordination

FedRAMP

Communication

Excel

PowerPoint

Visio

Education

BS/BA in IT, CS, Information Security, or related field

Tools

Excel

PowerPoint

Visio

Job description

Tenable is seeking an Information Security Mid Risk and Compliance Analyst to drive third-party risk management, assessments, and audits. You will work with Sales, Engineering, and Product teams to communicate compliance obligations and support remediation efforts, audits, and certifications.

Responsibilities include managing TPRA for vendors, educating stakeholders, coordinating audit walkthroughs, and helping build and monitor internal security controls. Hybrid role based at Columbia, MD HQ.