Information Security Analyst

Alteryx is leading the transformation of business through data, automation, and artificial intelligence. The Information Security Analyst, Security Trust supports customer security reviews, third-party risk assessments, vendor security reviews, security documentation, evidence management, and operational reporting. The role also focuses on improving Security Trust operations through AI-enabled workflows, automation, and cross-functional collaboration.

Responsibilities:

• Support global Security Trust operations across customer trust, third-party risk, and security assurance workflows
• Respond to customer security questionnaires, vendor assessments, due diligence requests, and requests for security documentation
• Ensure customer-facing responses are accurate, evidence-based, consistent with approved messaging, and aligned with Alteryx Security, Legal, Privacy, Product, and Compliance positions
• Translate technical security, privacy, compliance, and product information into clear, accurate, audience-appropriate responses for customers, vendors, and internal stakeholders
• Review security artifacts including SOC 1 and SOC 2 reports, ISO 27001 certifications, PCI DSS attestations, HIPAA security documentation, penetration testing reports, risk assessments, policies, procedures, and security questionnaires
• Help evaluate security risks, document findings, and recommend practical remediation or risk treatment options
• Maintain and improve reusable security content, including Trust Center materials, standard responses, knowledge articles, playbooks, internal documentation, evidence repositories, and AI-enabled knowledge bases
• Partner with Sales, Customer Success, Procurement, Legal, Privacy, Engineering, Product Security, Security Operations, Governance, Risk, and Compliance, and business stakeholders to support security reviews throughout customer and vendor lifecycles
• Track security review status, remediation activities, evidence requests, operational metrics, and workflow performance
• Support internal and external audit readiness by organizing evidence and maintaining accurate security documentation
• Identify opportunities to automate repetitive work, improve self-service, reduce turnaround time, and scale Security Trust operations globally
• Contribute to continuous improvement initiatives across the broader Information Security organization
• Use approved AI tools to accelerate questionnaire completion, vendor assessments, evidence collection, document generation, content maintenance, and security analysis
• Develop reusable prompts, workflows, and knowledge assets that improve consistency and reduce manual effort across the team
• Continuously identify opportunities to automate repetitive work and improve operational efficiency
• Validate AI-generated outputs for technical accuracy, completeness, consistency, and appropriate handling of sensitive information
• Measure and improve the effectiveness of AI-assisted workflows while maintaining human oversight and accountability
• Help drive adoption of AI-enabled processes that improve the experience of customers, vendors, and internal stakeholders

Requirements:

• Bachelor's degree or equivalent experience
• 2 to 5 years of experience in Information Security, Security Assurance, Customer Trust, Third Party Risk Management, Governance, Risk, and Compliance, or a related discipline
• Experience reviewing or responding to security questionnaires, due diligence requests, or vendor assessments
• Knowledge of SOC 2, ISO 27001, NIST CSF, NIST SP 800-53, PCI DSS, and HIPAA Security Rule
• Strong written, verbal, analytical, and organizational skills
• Demonstrated curiosity and enthusiasm for using AI and automation to improve security operations
• SaaS security experience
• Experience with Conveyor, SafeBase, Vanta, or similar Trust Center platforms
• Experience with third-party risk management platforms
• Familiarity with AWS, Azure, or Google Cloud Platform
• Experience using artificial intelligence and workflow automation in security operations
• Relevant security certifications (CISSP, CISM, CISA, CCSK, CTPRP)