Information Security Vendor Compliance and Customer Risk Analyst

Information Security Vendor Compliance and Customer Risk Analyst

Shape the Future of Cybersecurity at Forescout

Every day cyberattacks threaten to disrupt hospitals, power grids, financial systems, and the infrastructure we all depend on. At Forescout, we build defenses that keep civilization running smoothly in an increasingly connected world.

For more than 25 years, Fortune 100 organizations, government agencies, and large enterprises have trusted Forescout as their foundation to manage cyber risk, ensure compliance, and mitigate threats. From power grids and healthcare systems to financial networks and transportation hubs, Forescout protects the critical infrastructure of our modern world.

What You Will Do

The Vendor Compliance and Customer Risk Analyst position’s primary responsibilities are to support our vendor risk management and customer RFx security inquiry programs. Working alongside other members of the compliance team you will act as subject matter expert on vendor risk management and customer RFx security inquiries.

Responsibilities include the following:

• Review proposed and current vendor’s information security documentation.
• Identify inadequacies or risks presented by using the vendor.
• Work with vendor tools such as Onetrust, and Upguard to evaluate vendors.
• Work with vendors directly to obtain missing or required information.
• Work with sales, deal desk, and customers to answer customer RFx security questionnaires.
• Work with other compliance and operations team members to produce evidence during compliance audits.
• Work with the compliance team to refine both the vendor management and customer RFx programs.
• Work with procurement to enter purchase requests and track purchase orders for the Operations and Compliance teams.

What You Bring to Forescout

• An associate or bachelor's degree in the field of Information Security, Information Assurance, or similar OR
• 1+ years of experience in an Information Security role supporting a corporate Information Security vendor management or customer RFx program, or procurement role.
• Working understanding of Information Security supply chain concerns, customer due-diligence questionnaires, and compliance frameworks.
• Novice level understanding of SOC2, ISO 27001, NIST 800-171/53, or similar security standards. FedRAMP exposure a plus.
• Hands-on experience with vendor risk management tools such as Onetrust, Upguard, Bitsight, and Security Scorecard a plus.
• Ability to work in a very fast paced environment where priorities may shift with business needs.
• Ability to create and maintain documentation.
• Ability to communicate complex information security risks and scenarios to a general audience.
• Ability to work with minimal supervision (self-motivated/self-starter).
• Demonstrated ability to prioritize, work independently, and manage multiple projects.
• Strong verbal and written communication skills.

What Forescout Offers You

• Competitive compensation and benefits, including coverage of 85% of employee and dependent health care premiums, 100% company-paid employee life and disability insurance premiums, a 401(k) match, generous flexible time off for U.S. employees, voluntary life, accident, and critical illness insurance options, employee assistance program, maternity and parental bonding leave, and more.
• A collaborative, innovative environment where you can help advance global security while working with leading technology.
• Leadership teams that take ownership of team growth, actively supporting development, career progression, and opportunities for employees to do their best work.

• Learn more @.

Our Mission -Continuously identify, protect, and ensure the compliance of all cyber assets across the modern organization.

Our Values

• One Team– We all work together, and we all win together.
• Cyber Obsessed– We are curious about technology, and we are innovative and passionate about solving big programs.
• Customer Driven– We listen, we learn, and we make it right.
• Relentless– We're smart, determined, and find a way. We figure stuff out.
• Collaborative, without Ego– No one succeeds alone. We strive to be the humble person that people want to work with.

Thank you for taking the time to learn more about us. If this opportunity intrigues you, we encourage you to apply!

At Forescout, we are “Cyber Obsessed”. We are committed to maintaining a secure environment for our customers, employees, and business operations. To support these efforts, candidates may be asked to complete job-related pre-employment screening and verification processes, to the extent permitted by applicable law. Depending on the role and location, these measures may include identity verification, employment verification, background screening, work authorization verification, and other lawful security-related checks. Forescout conducts these processes in accordance with applicable laws and regulations, including privacy and data protection requirements, and obtains any required notices, authorizations, or consent before conducting such screenings.

Notice Regarding the Use of Artificial Intelligence in Recruitment

As part of our recruitment process, we may use artificial intelligence ("AI") or automated decision-support tools to assist with reviewing applications, assessing job-related qualifications, matching candidates to role requirements, scheduling interviews, and supporting candidate evaluation. These tools are designed to assist our recruiters and hiring managers and are not the sole basis for hiring decisions. Qualified personnel review relevant candidate information and exercise human judgment throughout the recruitment process.

We are committed to the responsible use of AI and seek to deploy and use AI-enabled recruiting tools in accordance with applicable laws, regulations, and our internal governance standards.

NOTE TO EMPLOYMENT AGENCIES: We value the partnerships we have built with our preferred vendors. Forescout does not accept unsolicited resumes from employment agencies.