Apply on Employer Site

TENEX.AI · 1 day ago

Information Security Analyst

Kansas City, MO SOC

Full-time

Onsite

Entry, Mid Level

2+ years exp

TENEX is an AI-native, automation-first Managed Detection and Response provider, seeking a detail-oriented Information Security Analyst to lead internal compliance and manage the Third-Party Risk Management program. This role involves preparing for audits, performing control monitoring, and ensuring adherence to security policies and governance standards.

Artificial Intelligence (AI)Cyber SecurityNetwork SecuritySaaS

Responsibilities

Internal SOC 1 & SOC 2 Compliance

Audit Readiness: Lead the preparation for annual SOC 1 Type II and SOC 2 Type II audits

Control Monitoring: Perform continuous testing of technical and administrative controls (e.g., access reviews, change management, encryption standards)

Evidence Collection: Coordinate with Engineering, HR, and DevOps teams to gather and organize audit evidence throughout the year

Remediation: Identify gaps in current processes and work with department heads to implement corrective actions

Third-Party Risk Management (TPRM)

Vendor Assessments: Conduct security assessments of new and existing vendors, reviewing their SOC reports, ISO certifications, and SIG questionnaires

Risk Scoring: Evaluate the risk profile of third-party tools and services, providing recommendations to leadership on whether to approve or mitigate risks

Contract Review: Partner with Legal to ensure security addendums (DSAs/BAsAs) meet our internal compliance requirements

Policy & Governance

Maintain and update the Information Security Management System (ISMS) documentation

Develop and deliver security awareness training tailored to compliance requirements

Act as the primary point of contact for client inquiries regarding our security posture