The Senior Security and Data Analyst supports Manhattan's Legal Department on information security, data protection, customer assurance, and licensing compliance matters. The role serves as a bridge between Legal, Global Security, Compliance, Product Management, R&D, Sales, and prospective and existing clients.
The Senior Security and Data Analyst will help protect company, customer, and partner information in Manhattan's SaaS environment; maintain the Manhattan Trust Center; analyze new global data protection requirements; and provide clear, practical responses to customer security assessments and pre-sales requests.
Responsibilities- Maintain the Manhattan Trust Center, including the accuracy, currency, organization, and availability of security, privacy, compliance, and customer-assurance materials.
- Monitor and analyze new and evolving global data protection laws, regulations, regulatory guidance, and industry requirements; assess their potential impact on Manhattan's products, services, contracts, and operations.
- Coordinate with Legal, Global Security, Compliance, Product Management, and other stakeholders to support implementation of new legal, regulatory, and security requirements.
- Work with potential clients during the pre-sales process regarding Manhattan's security controls, privacy program, compliance posture, and security assessments of Manhattan.
- Prepare, review, and present responses to client security questionnaires, due diligence requests, RFP requirements, audits, and related information requests.
- Respond to internal and external client requests for security, privacy, compliance, and data protection information.
- Help champion security and data protection policies, procedures, and control requirements across relevant teams.
- Assist with security-related escalations and incident investigations, including gathering facts, coordinating with subject-matter experts, documenting findings, and supporting timely resolution.
- Serve as a liaison to Sales Executives on licensing compliance matters, including identifying issues, coordinating internal review, and helping develop commercially practical resolutions.
- Draft clear, accurate, and well-supported exceptions, deviations, risk explanations, compensating-control narratives, and related written responses.
- Maintain appropriate documentation for work performed, decisions made, customer requests, assessments, exceptions, and resulting actions.
- Support the continued development of industry-standard security and privacy practices in Manhattan's cloud environment.
- Perform other duties as assigned by the Vice President - Contracts and Corporate Administration / Data Protection Officer.
Requirements- Bachelor's degree or equivalent combination of education and relevant experience.
- 5+ years experience in information security, privacy, data protection, compliance, technology risk, legal operations, or a related field.
- Knowledge of Manhattan applications, platforms, products, and related security controls preferred.
- Experience working with SaaS, enterprise software, cloud environments, or technology-enabled services.
- The role requires sound judgment, independent execution, strong client communication, and the ability to translate technical and regulatory requirements into clear written analysis and actionable recommendations.
- 5+ years experience supporting customer due diligence, security questionnaires, vendor assessments, audits, RFPs, or pre-sales activities.
- Ability to analyze and explain the practical business impact of new global data protection laws and regulatory requirements.
- Strong client presentation skills, including the ability to communicate effectively with technical, legal, procurement, privacy, security, and executive audiences.
- Excellent writing skills, with the ability to describe issues, risks, rationale, proposed limitations, and compensating controls clearly and persuasively.
- Strong written and verbal communication, analytical, problem-solving, organizational, and interpersonal skills.
- Ability to manage multiple priorities, meet deadlines, work independently with limited day-to-day supervision, and exercise sound judgment.
- Ability to handle confidential information with discretion and professionalism.
- Self-motivated, solution-focused, and able to make decisions independently while working within established guidelines.
Preferred skills and experience- Familiarity with security and compliance frameworks and controls, including SOC 1, SOC 2, ISO 27001, PCI DSS, or similar standards.
- Understanding of cloud, application, network, operating-system, database, and access-control security concepts.
- Experience interpreting security assessments, control descriptions, policies, certifications, audit materials, and threat or risk information.
- Experience participating in incident investigations, security escalations, or risk-mitigation activities.
- Experience working across multiple development, security, operations, legal, or commercial teams.
#LI-GW1
