Security Compliance Analyst

HelpSystems LLC; Eden Prairie (MN); On-site; USD 85,000 - 100,000; Full time

Benefits offered by this job

Health, dental, & vision coverage

401(k), HSA, & FSA enrollment

Flexible PTO

Tuition & personal enrichment support

ID Theft Protection Program

Job summary

Fortra is seeking a detail-oriented Security Compliance Analyst to join our Risk and Security team. You will evaluate third-party security posture, support the sales lifecycle, and ensure compliance with security and risk management requirements.

You will conduct vendor reviews, assist with RFP/RFI processes, and coordinate with Legal, IT, DevSecOps and Security Audit to strengthen customer due diligence and vendor risk management.

Qualifications

• Bachelor's degree or equivalent experience in security-related field.
• 2+ years experience in risk management or security audit.
• Experience supporting customer-facing teams during RFP/RFI.
• Familiarity with SOC 2, NIST, ISO 27001, FedRAMP, CIS.
• Knowledge of GDPR, EU AI Act, NIS2.

Responsibilities

• Be primary contact to internal sales/support for security compliance requirements.
• Evaluate and respond to customer security requests (questionnaires, documentation, contracts).
• Join customer calls to explain Fortra's controls and security program.
• Scope and align policy, controls, and processes with customer objectives.
• Remediate, respond to issues, and coordinate with Sales, Product Management, DevSecOps.
• Update security knowledge base in RFP tools and documentation.
• Own security compliance requests and drive new initiatives.
• Review customer contract requirements for Security, DORA, OTMs.

Skills

Strong analytical skills & |

Clear, effective communication

English language proficiency

Education

Bachelor's degree in Computer Science, Information Security, or related field

Tools

GRC tools (Vanta, Hyperproof, OneTrust, Hypercomply, Responsive, Loopio)

Job description

Whether you're an experienced professional or just getting started, your contributions matter at Fortra. If you're passionate about tackling meaningful challenges alongside talented team members committed to helping each other succeed, all while having lots of fun, we want to hear from you. We offer competitive benefits and salaries, personal and professional development opportunities, flexibility, and much more!

We are seeking a detail-oriented Security Compliance Analyst to join our Risk and Security team. This role combines deep knowledge of Fortra's product security infrastructure with the evaluation of assessing third-party (vendors) security posture. The ideal candidate will be responsible for continuously improving the customer due diligence process and vendor risk management practices to ensure compliance with security and risk management requirements. This position plays a key role in supporting the sales lifecycle and an internal resource for Legal, People Experience, IT, DevSecOps and Security Audit.

WHAT YOU'LL DO

Customer Due Diligence Responsibilities

• Be a primary point of contact to internal sales/support for security compliance requirements.
• Evaluate and respond to customer security requests such as questionnaires, documentation requirements, and contract reviews.
• Join customer calls to explain Fortra's technical and procedural controls and address security program questions in a clear and professional manner.
• Scope and align policy, controls, and processes with customer request objectives.
• Perform remediations, reply to customer follow-up for security issues and join customer calls, working cross-functionally with Sales, Product Management, and DevSecOps.
• Utilize RFP tools to update Fortra's security knowledge base and maintain required documentation.
• Enhance Security Compliance responsibilities by accepting ownership of accomplishing new and unique requests.
• Review customer contracts requirements for Security, DORA, Technical Operational Measures, and other addendums or exhibits to align with Fortra's controls and practices.

Vendor Risk Management Responsibilities

• Conduct vendor security reviews of prospective, new and existing vendors using Fortra's GRC platform to send and review questionnaires and security documentation.
• Monitor compliance with internal security standards, industry best practices, and regulatory requirements (e.g., SOC 2, ISO 27001, NIST, CIS).
• Continuously monitor high risk vendors, vendors who significantly drop in scorecard, and other vendor risks via third-party platform.
• Document and report findings, recommend remediation, elevate as appropriate, and track resolution through completion.

QUALIFICATIONS

• Proficiency in reading and writing in the English language, with the ability to explain complex security concepts to technical and non-technical stakeholders.
• Bachelor's degree in Computer Science, Information Security, or a related field (or equivalent work experience).
• Minimum 2 years direct experience or related background in technical support, risk management, IT/Security audit, or relevant experience within the software industry.
• Experience with supporting customer-facing teams throughout the RFP/RFI process and throughout the customer lifecycle.
• Hands‑on experience with GRC tools (Vanta, Hyperproof, OneTrust, Hypercomply, Responsive, Loopio etc.)
• Familiarity with Cloud hosting infrastructure (AWS, Azure, GCP)
• Knowledge of frameworks such as SOC 2, NIST, ISO 27001, FedRAMP or CIS Benchmarks.
• Knowledge of legal and regulatory requirements such as EU AI Act, DORA, GDPR, and NIS2.
• Understanding of vulnerability management, reviewing security documentation such as SOC 2 reports, SIG/CAIQ questionnaires, InfoSec Policies, Business Continuity Plans etc.
• Strong analytical and communication skills, with the ability to document technical issues and collaborate across teams.

Preferred Qualifications

• Industry certifications such as Security+ and GSEC.
• Experience working for a Cybersecurity organization.
• Experience working for a Global organization supporting customers across multiple time zones.
• Identifying gaps and maturing Security Compliance Programs at an Enterprise Level.

Compensation

85,000 USD - 100,000 USD

At Fortra, our compensation philosophy prioritizes fair market value and internal equity, aligning with your experience and specialized skill set.

Benefits

As a full-time, exempt employee at Fortra, you'll enjoy a comprehensive benefits package that includes:

• Health, dental, and vision coverage as of hire
• Immediate enrollment in 401(k), HSA, and FSA plans
• Flexible PTO policy
• Tuition and personal enrichment reimbursement
• Option to enroll in ID Theft Protection Program

About Fortra

At Fortra, we’re breaking the attack chain.

At Fortra, work is only part of the story. Explore what Life at Fortra is all about, from perks that support holistic wellbeing to a culture that keeps you connected and empowered to make an impact beyond the job.

EEO / Diversity Statement

As an EEO/Affirmative Action Employer, all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, veteran or disability status.