Security & Compliance Analyst
Core
Own the end-to-end security questionnaire process, maintain a centralized knowledge base of approved security answers, and build/maintain the public-facing Salesloft Trust Portal and reusable customer-facing collateral.
Role type
mid-level GRC analyst (security questionnaires & trust portal)
Builds
public-facing Trust Portal, reusable security collateral (one-pagers, FAQs, data flow docs), and automated questionnaire responses
Domain
SaaS security, GRC, and compliance frameworks
Required skills
security questionnaire management, knowledge base maintenance, ISO 27001, SOC 2, GDPR, written communication, risk documentation, policy maintenance, control audits, security awareness training
Preferred skills
CISA certification, questionnaire automation tools (Conveyor, Vanta, Drata)
Technologies
Conveyor, Vanta, Drata
Responsibilities
triage and complete inbound customer/prospect security questionnaires, maintain centralized knowledge base of approved answers, build and maintain Trust Portal and collateral, support compliance activities (ISO 27001, SOC 2, GDPR), assist with user access reviews and control audits, document and track security/privacy risks, support security awareness training
Seniority
Mid-level, hands-on IC
