Analyst, Security & Risk

About the Opportunity

The Analyst, Security & Risk will manage third-party risk assessments and threat management activities at Veza.  This role combines security assessment response and proactive threat identification to enhance Veza's security posture.  Reporting to the Security & Trust Office, this position requires strong analytical skills and security expertise.

You Will: 

• Core Roles and Responsibilities:
  • Third Party Risk Management
  • Threat Intelligence & Vulnerability Management
  • Security Assessment & Response
  • Cross-functional Security Collaboration
  • Process Development & Optimization
• Assessment & Risk Management:
  • Manage customer security assessments, RFIs, and questionnaires
  • Review security and privacy clauses in customer contracts
  • Maintain response templates and standard security documentation
  • Coordinate with internal teams for assessment completion
• Threat Management:
  • Monitor and analyze emerging threats relevant to Veza's platforms
  • Conduct vulnerability assessments and maintain threat intelligence
  • Develop security configuration recommendations
  • Create security metrics and risk analysis reports
• Continuous Improvement:
  • Streamline assessment and threat management workflows
  • Implement automation tools for efficiency
  • Maintain security documentation and best practices
  • Stay current with the latest trends, technologies, and best practices in threat intelligence and vulnerability management
  • Participate in relevant industry forums, conferences, and working groups to expand knowledge and network.
  • Contribute to the ongoing improvement of Veza's threat management processes and methodologies
  • Contribute to compliance maintenance (SOC 2, ISO 27001)
• Cross-functional Collaboration:
  • Work closely with the Product Security team to ensure that identified vulnerabilities are addressed in Veza's product development lifecycle.
  • Collaborate with Solutions Engineering, Customer Success and Support teams to provide expert guidance on security-related inquiries and concerns.
  • Contribute to the development of security awareness training materials and customer-facing security documentation.

You Have:

• Bachelor's degree in Computer Science, Cybersecurity, or a related field
• 3-5 years of information security experience
• Strong understanding of cloud security, IAM, and data protection
• Experience with security assessments and vulnerability management
• Excellent analytical and communication skills
• Familiarity with SaaS security requirements
• Security certifications (CISSP, CEH, CISA, or similar) preferred
• Familiarity with compliance frameworks such as SOC2, ISO27001, and GDPR is a plus