About the Role
Information Security Vendor Compliance and Customer Risk Analyst
Shape the Future of Cybersecurity at Forescout
Every day cyberattacks threaten to disrupt hospitals, power grids, financial systems, and the infrastructure we all depend on. At Forescout, we build defenses that keep civilization running smoothly in an increasingly connected world.
For more than 25 years, Fortune 100 organizations, government agencies, and large enterprises have trusted Forescout as their foundation to manage cyber risk, ensure compliance, and mitigate threats. From power grids and healthcare systems to financial networks and transportation hubs, Forescout protects the critical infrastructure of our modern world.
What You Will Do
The Vendor Compliance and Customer Risk Analyst position’s primary responsibilities are to support our vendor risk management and customer RFx security inquiry programs. Working alongside other members of the compliance team you will act as subject matter expert on vendor risk management and customer RFx security inquiries.
Responsibilities include the following:
Review proposed and current vendor’s information security documentation.
Identify inadequacies or risks presented by using the vendor.
Work with vendor tools such as Onetrust, and Upguard to evaluate vendors.
Work with vendors directly to obtain missing or required information.
Work with sales, deal desk, and customers to answer customer RFx security questionnaires.
Work with other compliance and operations team members to produce evidence during compliance audits.
Work with the compliance team to refine both the vendor management and customer RFx programs.
Work with procurement to enter purchase requests and track purchase orders for the Operations and Compliance teams.
Requirements
What You Bring to Forescout
- An associate or bachelor's degree in the field of Information Security, Information Assurance, or similar OR
- 1+ years of experience in an Information Security role supporting a corporate Information Security vendor management or customer RFx program, or procurement role.
- Working understanding of Information Security supply chain concerns, customer due-diligence questionnaires, and compliance frameworks.
- Novice level understanding of SOC2, ISO 27001, NIST 800-171/53, or similar security standards. FedRAMP exposure a plus.
- Hands-on experience with vendor risk management tools such as Onetrust, Upguard, Bitsight, and Security Scorecard a plus.
- Ability to work in a very fast paced environment where priorities may shift with business needs.
- Ability to create and maintain documentation.
- Ability to communicate complex information security risks and scenarios to a general audience.
- Ability to work with minimal supervision (self-motivated/self-starter).
- Demonstrated ability to prioritize, work independently, and manage multiple projects.
- Strong verbal and written communication skills.
About the Company
As AI-driven vulnerability and exploitation accelerate attack velocity to machine speed, Forescout is a foundational cyber defense layer that allows organizations to segment and isolate compromised systems, block lateral movement, and automate response across IT, OT, IoT, and IoMT environments. The Forescout Vistaro™ platform, powered by agentic AI and enhanced with Vedere Labs threat intelligence, delivers a Universal Zero Trust Network Access (UZTNA) architecture that integrates seamlessly with 180+ security and IT products. With Forescout Vistaro, organizations get comprehensive inventory and classification of both managed and unmanaged assets, continuous exposure management, and real-time protection including dynamic network segmentation and automated threat response.