# Information Security Analyst

**Company**: Tenable
**Location**: Columbia, MD
**Work arrangement**: hybrid
**Experience**: mid
**Job type**: full-time
**Salary**: $80,500-$107,166.67 USD
**Category**: Security
**Industry**: Technology

**Apply**: https://job-boards.greenhouse.io/tenableinc/jobs/5460006008?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_bb9f2a7a-d2f

## Description

Join Tenable's InfoSec team as a hands-on Mid Risk and Compliance Analyst. Drive compliance and assurance efforts for products and cloud services, assist with external risk assessments, security assessments, and audits.

Responsibilities:

- Serve as a company representative for security questionnaires, assessments, and audits

- Collaborate with teams to communicate compliance obligations and requirements

- Complete Third-Party Risk Assessments for new and potential vendors

- Educate stakeholders on their responsibilities

- Coordinate and participate in internal and external audit walkthroughs

- Help guide and perform remediation of issues identified during third-party assurance or internal reviews

- Support special projects, including development and execution of the internal compliance program, and administration of internal security controls

Requirements:

- 4+ years of experience performing information security and vendor risk assessments

- 4+ years of experience in responding to security assessments, SAQs, compliance requirements

- 4+ years of experience with implementation, monitoring, and reporting of control processes

- Experience working with FedRAMP

- Strong communication skills and ability to collaborate effectively

- Analytical mindset with a rational approach to security, risk, and compliance

- Advanced proficiency in Excel, PowerPoint, and Vizio

Benefits:

- Medical, dental, vision, disability, and life insurance

- 401(k) retirement savings with company match

- Employee stock purchase plan

- Flexible spending accounts

- Employee Assistance Program (EAP)

- Education assistance

- Parental leave

- Paid time off (PTO)

- Company-paid holidays

- Health and wellness events

- Community programs

## Skills

### Required
- information security
- vendor risk assessments
- compliance requirements
- control processes
- FedRAMP
- Excel
- PowerPoint
- Vizio

### Nice to have
- governance, risk and compliance frameworks (GRC)
- internal and external audits
- security certifications (SSCP, Sec+, CISA, etc)
- Big 4 or similar security consulting or risk assurance role
- audits, privacy, BC & DR Program Management
- BS, BA in Information Technology, Computer Science, Information Security

---

Source: [Apply at job-boards.greenhouse.io](https://job-boards.greenhouse.io/tenableinc/jobs/5460006008?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)