The Senior Security and Data Analyst supports Manhattan's Legal Department across information security, data protection, customer assurance, and licensing compliance. This role partners across Legal, Global Security, Compliance, Product Management, R and D, Sales, and client stakeholders to manage security assessments, due diligence responses, and pre-sales requests for Manhattan's SaaS environment.
Key Responsibilities
- Maintain the Manhattan Trust Center, ensuring security, privacy, compliance, and customer-assurance materials are accurate, current, well organized, and available.
- Monitor and analyze new and evolving global data protection laws, regulations, regulatory guidance, and industry requirements, assessing potential impacts on products, services, contracts, and operations.
- Coordinate with Legal, Global Security, Compliance, Product Management, and other stakeholders to support implementation of new legal, regulatory, and security requirements.
- Support potential clients during pre-sales activities by addressing Manhattan security controls, privacy program, compliance posture, and security assessments.
- Prepare, review, and present responses for client security questionnaires, due diligence requests, RFP requirements, audits, and related information requests.
- Respond to internal and external requests for information related to security, privacy, compliance, and data protection.
- Champion security and data protection policies, procedures, and control requirements across relevant teams.
- Assist with security-related escalations and incident investigations, including gathering facts, coordinating with subject-matter experts, documenting findings, and supporting timely resolution.
- Serve as a liaison to Sales Executives on licensing compliance matters, identifying issues, coordinating internal review, and contributing to commercially practical resolutions.
- Draft clear, accurate, and well-supported exceptions, deviations, risk explanations, compensating-control narratives, and other written responses.
- Maintain appropriate documentation for work performed, decisions made, customer requests, assessments, exceptions, and resulting actions.
- Support the ongoing development of industry-standard security and privacy practices in Manhattan's cloud environment.
- Perform other duties assigned by the Vice President - Contracts and Corporate Administration / Data Protection Officer.
Required Qualifications
- Bachelor's degree or equivalent combination of education and relevant experience.
- 5+ years of experience in information security, privacy, data protection, compliance, technology risk, legal operations, or a related field.
- Sound judgment, independent execution, strong client communication, and the ability to translate technical and regulatory requirements into clear written analysis and actionable recommendations.
- 5+ years of experience supporting customer due diligence, security questionnaires, vendor assessments, audits, RFPs, or pre-sales activities.
- Ability to analyze and explain the practical business impact of new global data protection laws and regulatory requirements.
- Strong client presentation skills for communicating with technical, legal, procurement, privacy, security, and executive audiences.
- Excellent writing skills for describing issues, risks, rationale, proposed limitations, and compensating controls clearly and persuasively.
- Strong written and verbal communication, analytical, problem-solving, organizational, and interpersonal skills.
- Ability to manage multiple priorities, meet deadlines, work independently with limited day-to-day supervision, and exercise sound judgment.
- Ability to handle confidential information with discretion and professionalism.
- Self-motivated, solution-focused, and able to make decisions independently within established guidelines.
Preferred Skills and Experience
- Familiarity with security and compliance frameworks and controls, including SOC 1, SOC 2, ISO 27001, PCI DSS, or similar standards.
- Understanding of cloud, application, network, operating-system, database, and access-control security concepts.
- Experience interpreting security assessments, control descriptions, policies, certifications, audit materials, and threat or risk information.
- Experience participating in incident investigations, security escalations, or risk-mitigation activities.
- Experience working across multiple development, security, operations, legal, or commercial teams.
Location and Work Setting
Atlanta, GA (onsite).