Senior Security Analyst

ThoughtSpot; Chicago (IL); On-site; USD 140,000 - 190,000; Full time

Job summary

ThoughtSpot is seeking a Senior Security Analyst to serve as a key technical resource for customers and internal teams. You will bridge information security, customer success, sales engineering, and product, helping strategic customers evaluate, adopt, and maintain confidence in ThoughtSpot’s security and data protection posture.

You’ll collaborate with Engineering, Support, and Compliance teams to answer complex security inquiries, validate controls, and ensure deployments meet enterprise

Qualifications

• 4+ years in Information Security and GRC with SaaS/cloud environments.
• Experience partnering with sales to respond to security inquiries and RFPs.
• 3+ years directing security audits and assessments with customers.
• Solid knowledge of cloud platforms (AWS/GCP/Azure), IAM, encryption, and RBAC.
• Familiarity with AI security, data privacy, governance for AI/LLMs, and AI systems.
• Working knowledge of SOC 2, ISO 27001, NIST CSF, HIPAA, GDPR, CCPA, and EU AI Act.
• Excellent written and verbal communication to diverse audiences.
• Self-motivated with ability to work with minimal supervision in a fast-paced environment.
• CISSP, CCSP, or other information security certifications are a plus.

Responsibilities

• Lead technical security reviews, architecture evaluations, and security questionnaires (RFPs/SIGs).
• Collaborate with Sales Engineering, Customer Success, and Engineering to clarify ThoughtSpot’s security model and compliance frameworks.
• Maintain and enhance customer-facing security documentation and trust center materials.
• Triage, investigate, and communicate enterprise security or privacy inquiries with Support and Engineering.

Skills

Security & GRC

Sales & RFP

Audits & Assessments

Cloud security

AI/LLM Security

Compliance standards

Communication

Execution & Ownership

Certifications

Job description

ThoughtSpot is the Data & AI platform turning enterprise data into actionable advantage. As a Gartner Magic Quadrant leader serving over 1,000 global customers, we revolutionized BI by enabling users to search their data naturally. With Spotter, our AI analyst that reasons over governed enterprise data, we’re replacing rigid, legacy reporting with real-time, AI-augmented intelligence. As our largest enterprise customers standardize on ThoughtSpot Analytics, we are committed to earning and keeping their trust by ensuring our platform meets the highest standards of security, compliance, and operational resilience.

We are looking for a Senior Security Analyst to serve as a key technical resource for our customers and internal teams. In this role, you will bridge the gap between information security, customer success, sales engineering, and more, helping our strategic customers evaluate, adopt, and maintain confidence in ThoughtSpot’s security and data protection posture. You’ll collaborate directly with customers, while working closely with Engineering, Product, Support, and Customer Success and being hands on in security initiatives, to answer complex security inquiries, validate compliance needs, and ensure our deployments adhere to strict enterprise security standards.

What You'll Do

• Customer Security Enablement: Act as a trusted technical security resource for prospects and existing enterprise customers, leading technical security reviews, architecture evaluations, and security questionnaires (RFPs/SIGs).
• Cross-Functional Collaboration: Partner directly with Sales Engineering, Customer Success, and Engineering teams to clarify ThoughtSpot’s security model, data protection policies, and compliance frameworks (SOC 2, ISO 27001, HIPAA, GDPR).
• Trust & Governance Enablement: Maintain and enhance our customer-facing security documentation, trust center materials, and technical whitepapers to streamline security evaluations.
• Risk & Incident Collaboration: Collaborate with Support, Engineering and Information Security teams to triage, investigate, and communicate enterprise security or privacy inquiries proactively.

What You Bring

• Security & GRC Experience: 4+ years of hands-on experience in Information Security and Governance, Risk, and Compliance (GRC), with SaaS and cloud services environment.
• Field Sales & RFP Alignment: Proven experience partnering with sales teams to respond to customer security inquiries, manage security/compliance questionnaires, and RFPs.
• Customer Audits & Assessments: 3+ years of experience directly working with customers, performing security audits, and facilitating security assessments.
• Technical Domain Knowledge: Solid understanding of security domains and cloud concepts (AWS/GCP/Azure), encryption, identity & access management (SSO, SAML, RBAC), vulnerability management, and change management.
• AI & LLM Security: Familiarity with emerging security, data privacy, and governance considerations for AI, Large Language Models (LLMs), and generative data systems (e.g., OWASP Top 10 for LLMs, model/prompt governance, AI system explainability).
• Compliance Framework Expertise: Working knowledge of compliance standards and regulations, including SOC 2, ISO 27001, NIST CSF, HIPAA, GDPR, CCPA, and EU AI Act.
• Communication & Stakeholder Management: Excellent verbal and written communication skills with the ability to articulate complex security topics clearly to a wide range of technical and business backgrounds.
• Execution & Ownership: Self-motivated and driven, with the proven ability to perform and excel with minimal supervision in a fast-paced environment.
• Certifications (Bonus): CISSP, CCSP, or other Information Security-related certifications are a plus.