Analyst, Security Compliance

At Teradata, we believe that people thrive when empowered with better information. Teradata Autonomous Knowledge Platform activates enterprise intelligence by unifying data, knowledge and business context to achieve tangible outcomes. With Teradata, organizations can provide agents with full context for impact when it matters. Our solution lets businesses connect and scale on premises, in the cloud, or through a hybrid approach.

Teradata delivers real business value with AI.

As a Compliance Analyst, you will play an important role in supporting Teradata's security compliance programs across our global cloud offerings, including our federal cloud environment. You'll help maintain key certifications and authorizations (FedRAMP Moderate, CMMC, ISO/IEC 27001, SOC 1/2, PCI DSS, HITRUST, and others), helping our commercial customers and federal stakeholders meet their security and regulatory obligations with confidence.

In this role, you will:

• Support day-to-day operations of Teradata's FedRAMP Moderate authorization, including continuous monitoring (Con Mon) deliverables, POA&M management and remediation tracking, significant change documentation, and 3
  
  PAO annual assessment support.
• Assist with Teradata's CMMC compliance activities, including evidence collection and control mapping aligned to NIST SP 800-171.
• Gather, organize, and provide evidence of Teradata's security controls to support internal and external audits and certification activities.
• Coordinate with internal stakeholders to support compliance initiatives across the broader framework portfolio, including ISO 27001, SOC 2 Type 2, PCI DSS, HIPAA, and HITRUST.
• Respond to customer and prospect security requests, including security documentation packages, questionnaires, and audit support.
• Develop and maintain compliance metrics to track program health and support continuous improvement reporting.

You will be part of Teradata's Information Security Compliance team, a collaborative group of specialists managing a broad portfolio of certifications, frameworks, and customer assurance activities across commercial and federal environments.

In this role, you will engage with:

• Internal partners such as Operations, Engineering, Law, IT, and Security teams to gather evidence, align on controls, and support remediation efforts.
• Regional teams, including Teradata's Global Services and Innovation Hubs, where you'll provide compliance support primarily through remote collaboration.
• External stakeholders, including third-party assessors (3
  
  PAOs), auditors, agency sponsors, and customers, to help demonstrate Teradata's security posture and maintain trust with our partners.

In this role, success means bringing curiosity, attention to detail, and a collaborative mindset to a dynamic compliance environment. The qualifications below outline what you'll need to thrive.

The ideal candidate will possess:

• A bachelor's degree in Information Security, Information Systems, or a related field, or equivalent experience, plus 1 to 3 years of experience in security, compliance, IT audit, or a related role.
• Foundational knowledge of security and privacy frameworks like ISO 27001, ISO 42001, SOC 1/2, HITRUST, and PCI DSS.
• Familiarity with FedRAMP (NIST SP 800-53), CMMC, and NIST SP 800-171 is strongly preferred.
• Experience supporting audits, risk assessments, or evidence collection activities.
• Strong organizational skills and the ability to manage multiple priorities in a deadline-driven environment.
• Effective communication skills, with the ability to work collaboratively across technical and non-technical teams.

Required:

• Must be a U.S. person located in the United States.

Preferred:

• This is a virtual role. Candidates located in or near San Diego, CA are preferred, as proximity to Teradata's headquarters enables on-site support for audit facilitation activities when needed.

• A working understanding of cloud security concepts and controls across environments such as AWS, Microsoft Azure, or Google Cloud Platform (GCP).
• Familiarity with technologies and controls spanning hosts, databases, networking, and…