Security Compliance Analyst

fortra; United States; On-site; USD 85,000 - 100,000; Full time

Benefits offered by this job

Health, dental, and vision coverage

401(k) enrollment

HSA and FSA plans

Flexible PTO

Tuition and personal enrichment

ID Theft Protection Program

Job summary

Fortra is seeking a Security Compliance Analyst to join the Risk and Security team, focusing on customer due diligence and vendor risk management to ensure security compliance across the sales lifecycle. The role involves engaging with Sales, Product Management, and DevSecOps, reviewing contracts and security documentation, and aligning controls with SOC 2, ISO 27001, NIST, CIS, GDPR, and other standards.

This full-time position offers competitive benefits and opportunities for professional

Qualifications

• Proficiency in reading and writing in English, with the ability to explain security concepts to diverse audiences.
• Bachelor's degree in CS/InfoSec or related field (or equivalent experience).
• 2+ years in technical support, risk management, IT/Security audit, or relevant software industry experience.

Responsibilities

• Be primary contact for security compliance requirements with internal sales/support.
• Evaluate customer security requests, questionnaires, documentation, and contract reviews.
• Join customer calls to explain controls and address security program questions.

Skills

Analytical skills

Communication skills

English proficiency

Education

Bachelor's degree in Computer Science, Information Security, or related field

Tools

GRC tools (Vanta, Hyperproof, OneTrust, Hypercomply, Responsive, Loopio)

Job description

Whether you're an experienced professional or just getting started, your contributions matter at Fortra. If you're passionate about tackling meaningful challenges alongside talented team members committed to helping each other succeed, all while having lots of fun, we want to hear from you. We offer competitive benefits and salaries, personal and professional development opportunities, flexibility, and much more!

We are seeking a detail-oriented Security Compliance Analyst to join our Risk and Security team. This role combines deep knowledge of Fortra's product security infrastructure with the evaluation of assessing third-party (vendors) security posture. The ideal candidate will be responsible for continuously improving the customer due diligence process and vendor risk management practices to ensure compliance with security and risk management requirements.

This position plays a key role in supporting the sales lifecycle and an internal resource for Legal, People Experience, IT, DevSecOps and Security Audit.

WHAT YOU'LL DO

Customer Due Diligence Responsibilities:

• Be a primary point of contact to internal sales/support for security compliance requirements.
• Evaluate and respond to customer security requests such as questionnaires, documentation requirements, and contract reviews.
• Join customer calls to explain Fortra's technical and procedural controls and address security program questions in a clear and professional manner.
• Scope and align policy, controls, and processes with customer request objectives.
• Perform remediations, reply to customer follow-up for security issues and join customer calls, working cross-functionally with Sales, Product Management, and DevSecOps.
• Utilize RFP tools to update Fortra's security knowledge base and maintain required documentation.
• Enhance Security Compliance responsibilities by accepting ownership of accomplishing new and unique requests.
• Review customer contracts requirements for Security, DORA, Technical Operational Measures, and other addendums or exhibits to align with Fortra's controls and practices.

Vendor Risk Management Responsibilities:

• Conduct vendor security reviews of prospective, new and existing vendors using Fortra's GRC platform to send and review questionnaires and security documentation.
• Monitor compliance with internal security standards, industry best practices, and regulatory requirements (e.g., SOC 2, ISO 27001, NIST, CIS).
• Continuously monitor high risk vendors, vendors who significantly drop in scorecard, and other vendor risks via third-party platform.
• Document and report findings, recommend remediation, elevate as appropriate, and track resolution through completion.

QUALIFICATIONS

• Proficiency in reading and writing in the English language, with the ability to explain complex security concepts to technical and non-technical stakeholders.
• Bachelor's degree in Computer Science, Information Security, or a related field (or equivalent work experience).
• Minimum 2 years direct experience or related background in technical support, risk management, IT/Security audit, or relevant experience within the software industry.
• Experience with supporting customer-facing teams throughout the RFP/RFI process and throughout the customer lifecycle.
• Hands-on experience with GRC tools (Vanta, Hyperproof, OneTrust, Hypercomply, Responsive, Loopio etc.)
• Familiarity with Cloud hosting infrastructure (AWS, Azure, GCP)
• Knowledge of frameworks such as SOC 2, NIST, ISO 27001, FedRAMP or CIS Benchmarks.
• Knowledge of legal and regulatory requirements such as EU AI Act, DORA, GDPR, and NIS2.
• Understanding of vulnerability management, reviewing security documentation such as SOC 2 reports, SIG/CAIQ questionnaires, InfoSec Policies, Business Continuity Plans etc.
• Strong analytical and communication skills, with the ability to document technical issues and collaborate across teams.

Preferred Qualifications

• Industry certifications such as Security+ and GSEC.
• Experience working for a Cybersecurity organization.
• Experience working for a Global organization supporting customers across multiple time zones.
• Identifying gaps and maturing Security Compliance Programs at an Enterprise Level.

Compensation

Compensation: 85,000 USD - 100,000 USD

At Fortra, we're breaking the attack chain. Ready to join us?

At Fortra, our compensation philosophy prioritizes fair market value and internal equity, aligning with your experience and specialized skill set.

As a full-time, exempt employee at Fortra, you'll enjoy a comprehensive benefits package that includes:

• Health, dental, and vision coverage as of hire
• Immediate enrollment in 401(k), HSA, and FSA plans
• Flexible PTO policy
• Tuition and personal enrichment reimbursement
• Option to enroll in ID Theft Protection Program

At Fortra, work is only part of the story. Explore what Life at Fortra is all about, from perks that support holistic wellbeing to a culture that keeps you connected and empowered to make an impact beyond the job.

Visit our websi