Security Assurance Analyst, Security and Privacy
Core
Conduct third-party risk assessments and manage security compliance questionnaires to protect customer data and meet regulatory obligations.
Role type
Senior IC security assurance analyst (third-party risk & compliance)
Builds
Third-party risk management program and external trust center responses
Domain
Transportation technology + Information Security Compliance
Deliverable
dashboards & analysis
Required skills
Third-party risk assessment, security compliance frameworks (ISO 27001, SOC 2, GDPR), GRC platforms, security questionnaire management, program management, risk mitigation documentation
Preferred skills
AI/LLM tools for compliance automation, microservices SaaS infrastructure knowledge, security certifications (Security+, CIPP), PMP
Technologies
AuditBoard, Vanta, Drata, SafeBase, Jira
Responsibilities
Review vendor requests and collect security data from third parties; Assess and document risks with proposed mitigations; Draft responses to customer security questionnaires (CAIQ, SIG); Manage workflows, queues, and compile reporting metrics
Seniority
Senior, hands-on IC
