Information Security Analyst

A hands-on risk and compliance analyst on Tenable's InfoSec team, working on compliance and assurance for its products and cloud services. The analyst represents the company on security questionnaires, assessments and audits, completes third-party vendor risk assessments, joins audit walkthroughs, and helps remediate issues found in reviews.

Tenable wants four or more years of security and vendor risk assessments, responding to security assessments, and monitoring control processes, plus FedRAMP experience and strong Excel and PowerPoint skills. GRC frameworks, certifications such as CISA or Security+ and Big 4 consulting experience are pluses. Hybrid at the Columbia, Maryland headquarters; US-based only.