<div class="content-intro"><p><strong>Who is Tenable?</strong></p> <p>Tenable® is the Exposure Management company. Over 40,000 organizations around the globe rely on Tenable to understand and reduce cyber risk. Our global employees support 65 percent of the Fortune 500, 50 percent of the Global 2000, and large government agencies. Come be part of our journey!</p> <p><strong>What makes Tenable such a great place to work?</strong></p> <p>Ask a member of our team and they’ll answer, “Our people!” We work together to build and innovate best-in-class cybersecurity solutions for our customers; all while creating a culture of belonging, respect, and excellence where we can be our best selves. When you’re part of our #OneTenable team, you can expect to partner with some of the most talented and passionate people in the industry, and have the support and resources you need to do work that truly matters. We deliver results that exceed expectations and we win together!</p></div><p><span style="color: #333333;"><strong>Your Role:</strong></span></p> <p><span style="color: #333333;">Join our InfoSec team at Tenable as a hands-on Mid Risk and Compliance Analyst. Drive compliance and assurance efforts for our products and cloud services while assisting with external risk assessments, security assessments, and audits. Make a real impact on our organization's security and customer trust and come join us at Tenable!</span></p> <p><span style="color: #333333;"><strong>Your Opportunity:</strong></span></p> <ul> <li><span style="color: #1d1c1d;">Serve as a company representative with prospects, customers, and partners for security questionnaires, assessments, and audits</span></li> <li><span style="color: #1d1c1d;">Collaborate with Sales, Engineering, Information Security, IT, and Product Development teams to communicate compliance obligations and requirements</span></li> <li><span style="color: #1d1c1d;">Complete Third-Party Risk Assessments (TPRM Program) for new and potential vendors</span></li> <li><span style="color: #1d1c1d;">Educate stakeholders on their responsibilities</span></li> <li><span style="color: #1d1c1d;">Coordinate and participate in internal and external audit walkthroughs</span></li> <li><span style="color: #1d1c1d;">Help guide and perform remediation of issues identified during third-party assurance or internal reviews</span></li> <li><span style="color: #1d1c1d;">Support special projects as needed, which may include:</span> <ul> <li><span style="color: #1d1c1d;">Assisting in the development and execution of the internal compliance program, involving preparation for audits, certifications, and risk assessments.</span></li> <li><span style="color: #1d1c1d;">Assisting in the development, administration, and continuous monitoring of internal security controls.</span></li> </ul> </li> </ul> <p><span style="color: #333333;"><strong>What You'll Need:</strong></span></p> <ul> <li><strong>Able to work hybrid/onsite location at HQ in Columbia MD. This position is US-based only</strong></li> <li><span style="color: #333333;">4+ years of experience performing information security and vendor risk assessments based upon industry accepted standards</span></li> <li><span style="color: #333333;">4+ years of experience in responding to security assessments, SAQs, compliance requirements, etc</span></li> <li><span style="color: #333333;">4+ years of experience with implementation, monitoring, and reporting of control processes, documentation, and remediation items</span></li> <li><span style="color: #333333;">Experience working with the Federal Risk and Authorization Management Program (FedRAMP)</span></li> <li><span style="color: #333333;">Be self-driven with the ability to work independently and comprehend all requirements</span></li> <li><span style="color: #333333;">Strong communication skills and ability to collaborate effectively with all levels</span></li> <li><span style="color: #333333;">Analytical mindset with a rational, pragmatic, and realistic approach to security, risk, and compliance</span></li> <li><span style="color: #333333;">Ability to adopt and utilize technology, with advanced proficiency in Excel, PowerPoint, and Vizio.</span></li> </ul> <p><span style="color: #333333;"><strong>And Ideally:</strong></span></p> <ul> <li><span style="color: #333333;">Knowledge of governance, risk and compliance frameworks (GRC)</span></li> <li><span style="color: #333333;">Experience performing or undergoing internal and external audits</span></li> <li><span style="color: #333333;">Relevant security certifications (SSCP, Sec+, CISA, etc)</span></li> <li><span style="color: #333333;">Experience in a Big 4 or similar security consulting or risk assurance role</span></li> <li><span style="color: #333333;">Experience with conducting audits, privacy, BC & DR Program Management</span></li> <li><span style="color: #333333;">BS, BA in Information Technology, Computer Science, Information Security, or other related field</span></li> </ul> <p>#LI-Hybrid #LI-MM1</p><div class="content-pay-transparency"><div class="pay-input">