CSA Security Analyst

The Customer Security Assurance (CSA) Security Analyst has experience with Cloud technologies, security and compliance controls, and basic understanding of cybersecurity regulatory expectations for critical industry sectors. The Security Analysts play a key role in the CSA program that supports new, renewing and annual customer security due diligence of Cloud Software Group (Cloud SG). The CSA Security Analyst is a key customer facing role that assists with handling customer security due diligence questionnaires, customer calls, and customer security audits.

This role also plans, creates, coordinates and maintains Security documentation on our Trust Center, working across Sales, Product teams, Legal, Security, Engineering, Support and Information Technology (IT). A successful candidate possesses an in-depth understanding of cybersecurity technical and process controls and can quickly learn our Cloud SG services, effectively educating our customers about those services, and ensuring the information that’s being communicated is accurate and complete.

The Security Analyst works closely with Sales/Account Team, Product, Engineering, Corporate Security, GRC, Legal, Privacy, IT, Support, HR, Finance, and other stakeholders to provide timely and authoritative responses to customer security requirements.

In addition to responding to customer inquiries, the role proactively identifies recurring customer requirements, emerging regulatory expectations, security trends, and documentation gaps to convert into scalable Trust Center content, standard responses, knowledge articles, process improvements, and automation opportunities.

Key Roles & Responsibilities

• Own assigned Customer Security Assurance requests from intake through completion, ensuring responses are accurate, timely, complete, and appropriately approved.
• Manage and respond to customer security questionnaires, due-diligence requests, RFP/RFI security requirements, customer assessments, and annual security reviews.
• Serve as the primary Security SME for assigned customer engagements and represent Cloud SG's security posture professionally and confidently.
• Participate in customer security calls, technical discussions, security briefings, due-diligence meetings, and customer audits.
• Explain Cloud SG's security architecture, controls, policies, certifications, risk management practices, and security operations to both technical and non-technical audiences.
• Analyze customer questions to determine the underlying security or compliance control requirement, not just the literal wording.
• Research complex or ambiguous customer security requirements and coordinate with appropriate internal SMEs to develop authoritative responses.
• Ensure responses are consistent with Cloud SG policies, technical implementations, certifications, regulatory obligations, contractual commitments, and approved security positions.
• Challenge responses that are incomplete, inconsistent, technically unsupported, or create unintended security or contractual commitments.
• Identify customer requirements that fall outside Cloud SG's standard security posture and appropriately elevate them for Security, Legal, Product, GRC, or Executive review.
• Maintain a sales-enablement approach while protecting Cloud SG from unnecessary security, regulatory, contractual, or operational commitments.

• Develop a strong working understanding of Cloud SG's cloud, SaaS, infrastructure, application, identity, endpoint, network, data protection, monitoring, vulnerability management, incident response, and secure development environments.
• Evaluate customer security questions against the underlying technical and operational controls implemented by…