Accountabilities:

Manage and respond to customer security inquiries, due diligence requests, security questionnaires, and security-related sections of RFPs and RFIs using approved documentation, templates, and guidance.
Review, prioritize, track, and coordinate customer security requests, audit evidence submissions, contractual reviews, and third-party risk assessments through ServiceNow or other approved workflow platforms.
Collaborate with Information Security, Legal, Privacy, Procurement, Sales, Product, and technical stakeholders to collect, validate, and approve accurate security-related information.
Prepare clear, professional, and customer-appropriate responses covering security controls, organizational policies, compliance frameworks, certifications, audit reports, privacy practices, and risk management activities.
Support the review of customer and vendor contracts, particularly clauses relating to information security, data protection, privacy, audit rights, incident notification, third-party obligations, and regulatory compliance.
Assess customer and supplier security requirements against internal policies, established standards, control capabilities, and approved risk positions.
Identify potential control gaps, non-standard contractual commitments, conflicting requirements, unclear language, and other risk indicators, escalating concerns to the appropriate internal teams.
Coordinate audit evidence requests with control owners and internal audit stakeholders, ensuring that all externally shared documentation is accurate, up to date, approved, and authorized for disclosure.
Support third-party risk management activities, including vendor and supplier due diligence, security assessments, periodic reviews, renewals, and ongoing monitoring.
Evaluate vendor-provided security questionnaires, certifications, audit reports, policies, and supporting documentation against established assessment criteria.
Maintain accurate records of third-party assessments, outstanding documentation, risk decisions, exceptions, remediation plans, approvals, and follow-up activities.
Help develop and maintain customer-facing Trust Center resources covering information security, privacy, compliance, certifications, audits, and assurance documentation.
Regularly review published Trust Center materials to ensure accuracy, relevance, consistency, and alignment with approved internal policies and disclosures.
Maintain and improve standardized response libraries, security FAQs, customer assurance materials, third-party risk guidance, and internal knowledge resources.
Document customer inquiries, questionnaire responses, contractual reviews, audit evidence, risk assessments, escalations, and final decisions.
Monitor request volumes, turnaround times, outstanding reviews, and recurring issues to ensure timely completion and effective reporting.
Identify recurring customer concerns, vendor risk trends, documentation gaps, and process inefficiencies, recommending improvements to strengthen operational effectiveness.
Contribute to internal procedures, process documentation, and guidance covering customer security reviews, audit coordination, contractual assessments, Trust Center management, and third-party risk management.
Requirements:
Bachelor's degree in Information Systems, Cybersecurity, Risk Management, or a related discipline, or equivalent professional experience.
At least 6 years of relevant experience in information security, compliance, customer assurance, third-party risk management, audit support, contract support, vendor management, or a related field.
Required familiarity with major security, privacy, and compliance frameworks, including ISO 27001, NIST SP 800-171, GDPR, and SOC 2.
Experience responding to customer security inquiries, due diligence requests, security questionnaires, and security-related RFP/RFI requirements.
Understanding of security-related contractual provisions, including information security obligations, audit rights, incident notification, data protection, privacy, third-party requirements, and regulatory compliance.
Ability to interpret and assess organizational policies, security standards, procedures, contractual language, vendor documentation, customer requirements, and audit reports.
Strong written communication skills, with the ability to translate complex security and compliance information into clear, accurate, and professional responses.
Excellent attention to detail and the ability to identify inconsistencies, missing information, unclear requirements, control gaps, and potential compliance risks.
Strong analytical and problem-solving abilities, particularly when assessing security requirements and evaluating risk-related documentation.
Excellent organizational and time management skills, with the ability to manage multiple requests, competing priorities, and deadlines simultaneously.
Strong interpersonal and collaboration skills, with the ability to work effectively across Legal, Information Security, Procurement, Sales, and technical teams.
Experience with common security controls, control mapping, and alignment across different compliance frameworks is preferred.
Familiarity with ServiceNow or similar ticketing, workflow management, case management, or risk management platforms is advantageous.
Previous experience supporting third-party risk management, vendor due diligence, supplier security assessments, or ongoing vendor reviews is desirable.
Proficiency in Microsoft Office, knowledge management systems, ServiceNow, and collaboration tools.
Professional certifications in cybersecurity, information security, compliance, or risk management are considered an advantage but are not mandatory.
Work authorization: Candidates must be authorized to work in the United States without requiring employment-based visa sponsorship now or in the future. Visa sponsorship and transfers are not available for this position.
Benefits:
Competitive annual salary: Estimated base salary range of $95,100–$146,300, depending on geographic location, professional experience, qualifications, certifications, and other relevant factors.
Annual incentive opportunities: Eligibility for a discretionary annual incentive plan, subject to applicable role and company criteria.
Comprehensive healthcare: Medical, dental, and vision insurance coverage.
Financial protection: Life insurance and disability benefits.
Retirement planning: Access to a 401(k) retirement savings plan.
Paid time off: Generous paid leave policies, including paid parental leave.
Remote flexibility: Opportunity to work remotely within the United States.
Professional development: Opportunities to expand expertise in cybersecurity, regulatory compliance, audit management, and third-party risk.
Collaborative environment: Work alongside multidisciplinary teams and experienced professionals in security, legal, privacy, and business operations.
Meaningful impact: Contribute directly to strengthening customer trust, organizational security assurance, and compliance practices.