Your Role:Join our InfoSec team at Tenable as a hands-on Mid Risk and Compliance Analyst. Drive compliance and assurance efforts for our products and cloud services while assisting with external risk assessments, security assessments, and audits. Make a real impact on our organization's security and customer trust and come join us at Tenable!
Your Opportunity:- Serve as a company representative with prospects, customers, and partners for security questionnaires, assessments, and audits
- Collaborate with Sales, Engineering, Information Security, IT, and Product Development teams to communicate compliance obligations and requirements
- Complete Third-Party Risk Assessments (TPRM Program) for new and potential vendors
- Educate stakeholders on their responsibilities
- Coordinate and participate in internal and external audit walkthroughs
- Help guide and perform remediation of issues identified during third-party assurance or internal reviews
- Support special projects as needed, which may include:
- Assisting in the development and execution of the internal compliance program, involving preparation for audits, certifications, and risk assessments.
- Assisting in the development, administration, and continuous monitoring of internal security controls.
What You'll Need:- Able to work hybrid/onsite location at HQ in Columbia MD. This position is US-based only
- 4+ years of experience performing information security and vendor risk assessments based upon industry accepted standards
- 4+ years of experience in responding to security assessments, SAQs, compliance requirements, etc
- 4+ years of experience with implementation, monitoring, and reporting of control processes, documentation, and remediation items
- Experience working with the Federal Risk and Authorization Management Program (FedRAMP)
- Be self-driven with the ability to work independently and comprehend all requirements
- Strong communication skills and ability to collaborate effectively with all levels
- Analytical mindset with a rational, pragmatic, and realistic approach to security, risk, and compliance
- Ability to adopt and utilize technology, with advanced proficiency in Excel, PowerPoint, and Vizio.
And Ideally:- Knowledge of governance, risk and compliance frameworks (GRC)
- Experience performing or undergoing internal and external audits
- Relevant security certifications (SSCP, Sec+, CISA, etc)
- Experience in a Big 4 or similar security consulting or risk assurance role
- Experience with conducting audits, privacy, BC & DR Program Management
- BS, BA in Information Technology, Computer Science, Information Security, or other related field
#LI-Hybrid #LI-MM1
This is the base pay range for this position. Compensation for the role will depend on a number of factors, including the candidate's qualifications, skills, competencies, location and experience, and may fall outside of the range shown. Employees are also eligible for variable compensation in addition to base pay (commission for sales roles, bonus for non-sales roles), depending on company and individual performance. Tenable also offers a variety of comprehensive and competitive benefits which include: medical, dental, vision, disability and life insurance; 401(k) retirement savings with company match; an employee stock purchase plan; an employee referral program; flexible spending accounts; an Employee Assistance Program (EAP); education assistance; parental leave; paid time off (PTO); company-paid holidays; health and wellness events; and community programs.
US Pay Range
$80,500-$107,166.67 USD
