Info-Security RFP and Vendor Management Analyst

About the Role:

This position is responsible for all formal responses regarding the Motive Information Security Program. This includes Requests for Proposals (“RFPs”), contract renewals, audit preparation, Vendor Assessments and other responses as needed. Additionally, this role will work with various stakeholders to document / update information security policies, processes and procedures as deemed appropriate.

What You'll Do:

• Understand Motive's security controls, policies and procedures as it relates to internal processes and across customer product lines
• Draft responses to security RFPs and questionnaires received from customers, prospects and vendors
• Perform third-party vendor assessments during onboarding and through continuous monitoring, including evaluation of AI vendors’ security and compliance capabilities
• Interface with customers on their questions surrounding information and application security
• Maintain an understanding of the different computing environments at Motive including the controls in place
• Develop and implement information security policies, processes and procedures where necessary
• Maintain and manage the Security Trust Portal, including content updates, customer request handling, and coordination with internal stakeholders to ensure the portal is consistently updated with the latest compliance certifications, policies, and security documents

What We're Looking For:

• Bachelor’s degree in related field (i.e. Info Security, IT, Computer Science etc.)
• Three (3) plus years of experience in IT audit, IT security or Systems Administration
• Preferred to have RFPIO tool hands-on, or any RFP tool (e.g., responsive)
• Strong understanding of technology environments and their components including the risks associated with their use
• Strong written and verbal communication skills (Must to have)
• Ability to effectively communicate with other areas of the company
• Experience documenting information security policies, processes and procedures or similarly structured documentation is a plus
• Technical writing experience in the software industry is preferred
• CISA or equivalent certification is preferred
• Proactive attitude and comfortable working under pressure strict deadlines
• Demonstrated ability to think critically, problem solve and simplify complexity
• High level understanding of cloud infrastructure
• High level understanding of NIST framework, ISO 27001,or SOC frameworks
• Worked as a technical project manager would be a plus
• Proven self-starter, requiring little supervision to take initiative and execute above duties