T

Tenable

Vulnerability management for IT and OT

Information Security Analyst

Security Governance, Risk & ComplianceConfirmed live in the last 24 hours
Full-timeColumbia, MD, USA

About the Job

Requirements

  • The position is US-based only and requires working hybrid or onsite at the headquarters in Columbia, Maryland.
  • At least 4 years of experience performing information security and vendor risk assessments based on industry-accepted standards.
  • At least 4 years of experience responding to security assessments, security assessment questionnaires, and compliance requirements.
  • At least 4 years of experience implementing, monitoring, and reporting on control processes, documentation, and remediation items.
  • Experience working with the Federal Risk and Authorization Management Program (FedRAMP).
  • Ability to work independently and comprehend requirements.
  • Strong communication skills and ability to collaborate effectively across all levels.
  • An analytical mindset and a pragmatic, realistic approach to security, risk, and compliance.
  • Advanced proficiency in Excel, PowerPoint, and Visio.

Responsibilities

  • Represent the company to prospects, customers, and partners for security questionnaires, assessments, and audits.
  • Collaborate with Sales, Engineering, Information Security, IT, and Product Development teams to communicate compliance obligations and requirements.
  • Complete third-party risk assessments for new and potential vendors.
  • Educate stakeholders on their responsibilities.
  • Coordinate and participate in internal and external audit walkthroughs.
  • Help guide and perform remediation of issues identified during third-party assurance or internal reviews.
  • Assist in developing and executing the internal compliance program, including preparation for audits, certifications, and risk assessments.
  • Assist in developing, administering, and continuously monitoring internal security controls.
  • Support special projects as needed.

Desired Qualifications

  • Knowledge of governance, risk, and compliance frameworks.
  • Experience performing or undergoing internal and external audits.
  • Relevant security certifications, such as SSCP, Security+, or CISA.
  • Experience in a Big Four or similar security consulting or risk assurance role.
  • Experience conducting audits and managing privacy, business continuity, and disaster recovery programs.
  • A BS or BA in Information Technology, Computer Science, Information Security, or another related field.

About the Company

Tenable

Vulnerability management for IT and OT

Tenable provides vulnerability management for IT and OT environments, helping organizations identify and fix security weaknesses. Its products include Nessus, a widely used vulnerability scanner; Tenable.io, a cloud-based platform that inventories assets and prioritizes risks; and Tenable.ot, which protects industrial control systems and other operational technology. The company differentiates itself with an integrated, subscription-based suite that covers both IT and OT, plus professional services and PCI ASV compliance support. Tenable’s goal is to help customers reduce cyber risk by enabling teams to identify, investigate, and remediate vulnerabilities efficiently across diverse environments.

Company size
1,001-5,000
Company stage
IPO
Headquarters
Columbia, MD
Founded
2002

Recently Posted Jobs

Explore more opportunities at Tenable

See more jobs