{"id":2893199,"url":"https://alion.io/job/cloud-software-group-csa-security-analyst","title":"CSA Security Analyst","company":{"id":8307,"name":"Cloud Software Group","domain":"cloud.com","url":"https://alion.io/company/cloud-software-group","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":77,"open_postings":12,"ghost_share":0,"stale_share":0.917,"repost_share":0,"time_to_fill_p50_days":31,"computed_at":"2026-10-30T05:48:23Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["San Ramon, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":127002,"max":190502,"currency":"USD","period":"year","gross":null,"usd_annual":190502},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CMMC","optional":false},{"name":"EU AI Act","optional":false},{"name":"FedRAMP","optional":false},{"name":"GDPR","optional":false},{"name":"HIPAA","optional":false},{"name":"ISO 27001","optional":false},{"name":"ISO 42001","optional":false},{"name":"PCI DSS","optional":false},{"name":"SOC 2","optional":false},{"name":"ServiceNow","optional":true}],"status":"live","first_seen_at":"2026-10-19T00:00:00Z","employer_posted_date":"2026-10-19","last_verified_at":"2026-10-30T15:03:00Z","board_verified":true,"closed_at":null,"days_open":11,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":11},"description":"The Customer Security Assurance (CSA) Security Analyst has experience with Cloud technologies, security and compliance controls, and basic understanding of cybersecurity regulatory expectations for critical industry sectors. The Security Analysts play a key role in the CSA program that supports new, renewing and annual customer security due diligence of Cloud Software Group (Cloud SG). The CSA Security Analyst is a key customer facing role that assists with handling customer security due diligence questionnaires, customer calls, and customer security audits. This role also plans, creates, coordinates and maintains Security documentation on our Trust Center, working across Sales, Product teams, Legal, Security, Engineering, Support and Information Technology (IT). A successful candidate possesses an in-depth understanding of cybersecurity technical and process controls and can quickly learn our Cloud SG services, effectively educating our customers about those services, and ensuring the information that’s being communicated is accurate and complete.\nThe Security Analyst works closely with Sales/Account Team, Product, Engineering, Corporate Security, GRC, Legal, Privacy, IT, Support, HR, Finance, and other stakeholders to provide timely and authoritative responses to customer security requirements.\nIn addition to responding to customer inquiries, the role proactively identifies recurring customer requirements, emerging regulatory expectations, security trends, and documentation gaps to convert into scalable Trust Center content, standard responses, knowledge articles, process improvements, and automation opportunities.\nKey Roles & Responsibilities\n1. Customer Security Assurance\nOwn assigned Customer Security Assurance requests from intake through completion, ensuring responses are accurate, timely, complete, and appropriately approved.\nManage and respond to customer security questionnaires, due-diligence requests, RFP/RFI security requirements, customer assessments, and annual security reviews.\nServe as the primary Security SME for assigned customer engagements and represent Cloud SG's security posture professionally and confidently.\nParticipate in customer security calls, technical discussions, security briefings, due-diligence meetings, and customer audits.\nExplain Cloud SG's security architecture, controls, policies, certifications, risk management practices, and security operations to both technical and non-technical audiences.\nAnalyze customer questions to determine the underlying security or compliance control requirement, not just the literal wording.\nResearch complex or ambiguous customer security requirements and coordinate with appropriate internal SMEs to develop authoritative responses.\nEnsure responses are consistent with Cloud SG policies, technical implementations, certifications, regulatory obligations, contractual commitments, and approved security positions.\nChallenge responses that are incomplete, inconsistent, technically unsupported, or create unintended security or contractual commitments.\nIdentify customer requirements that fall outside Cloud SG's standard security posture and appropriately escalate them for Security, Legal, Product, GRC, or Executive review.\nMaintain a sales-enablement approach while protecting Cloud SG from unnecessary security, regulatory, contractual, or operational commitments.\n2. Technical Security & Risk Analysis\nDevelop a strong working understanding of Cloud SG's cloud, SaaS, infrastructure, application, identity, endpoint, network, data protection, monitoring, vulnerability management, incident response, and secure development environments.\nEvaluate customer security questions against the underlying technical and operational controls implemented by Cloud SG.\nUnderstand the relationship between security requirements, control objectives, control implementation, evidence, and residual risk.\nWork with Security, Product, and Engineering SMEs to validate technical responses and ensure customer-facing information accurately reflects current implementations.\nIdentify potential security gaps, control deficiencies, architectural concerns, or exceptions raised through customer due diligence.\nAssess customer-specific security requirements and determine whether they are:Already addressed by existing controls;\nAddressable through standard Cloud SG processes;\nRequiring additional evidence or clarification;\nRequiring risk acceptance or exception management; or\nRequiring Legal, Product, Engineering, or Security remediation.\n\nTranslate technical security issues into business and customer impact.\nRecognize when customer requirements create broader precedent or obligations across products, Business Units, or customers.\nSupport risk-based decision-making rather than treating all customer requirements as equal or requiring identical responses.\n3. Security Compliance & Regulatory Alignment\nApply practical knowledge of cybersecurity and compliance frameworks including ISO 27001, SOC 2, NIST, PCI DSS, FedRAMP, CMMC, ISO 42001, ISO 27701, HIPAA, and similar standards.\nUnderstand how customer requirements map to Cloud SG's existing compliance certifications, control environment, and security programs.\nMaintain awareness of current and emerging cybersecurity, privacy, AI, and technology regulations, including GDPR, DORA, EU Cyber Resilience Act (CRA), EU AI Act, and other applicable requirements.\nSupport interpretation of regulatory requirements in the context of customer security expectations.\nIdentify where customer requests extend beyond standard regulatory, contractual, or certification requirements.\nProvide guidance to stakeholders on the distinction between regulatory requirements, certification requirements, contractual obligations, customer preferences, and internal security standards.\nSupport preparation for evidence based customer-driven audits and assessments. Coordinate requested evidence against those already collected for Compliance or other Customer audits, working with relevant SMEs for additional requirements.\nAssist in tracking and resolving customer audit findings where Cloud SG has an obligation to perform remediation.\n4. Customer Contract & Security Requirements\nSupport review of new and renewal customer contracts, security addenda, data protection agreements, questionnaires, and related security documentation.\nIdentify security, privacy, compliance, audit, incident notification, vulnerability management, penetration testing, data protection, business continuity, and other technology-related contractual requirements.\nCoordinate with Cloud SG Legal, Privacy, Security, Product, Engineering, and other SMEs to assess proposed contractual requirements.\nIdentify provisions that may create security commitments beyond Cloud SG's established policies, controls, certifications, or operational capabilities.\nProvide Legal with standardized, approved Security language and supporting technical information.\nHelp negotiate security requirements by providing fact-based technical and risk analysis.\nQualifications & Experience\nBachelor's degree in Cybersecurity, Information Technology, Computer Science, Risk Management, Business or equivalent experience\n5+ years of experience in cybersecurity, GRC, security engineering, compliance, IT risk, audit or equivalent experience.\nCustomer Security & Trust experience in a complex, multi-product, Cloud or Software as a Service corporation, or equivalent Third-Party/Vendor IT Risk Management experience\nExperience working with Sales and/or being customer-facing, representing company Security posture and controls across industry requirements.\nKnowledge of current, new, and upcoming regulations such as GDPR, DORA, CRA, EU AI Act, etc.\nDemonstrated experience working with technical and security teams in a technology, SaaS, cloud, or enterprise environment.\nStrong understanding of cybersecurity principles, security controls, risk management, and compliance frameworks.\nPractical experience with one or more frameworks such as ISO 27001, SOC 2, NIST, PCI DSS, FedRAMP, CMMC, ISO 42001, ISO 27701, HIPAA, or similar standards.\nAbility to understand technical architecture, security controls, system configurations, and engineering processes sufficiently to evaluate compliance and risk.\nStrong analytical and problem-solving skills with the ability to investigate complex issues, determine root-cause, and define appropriate solutions.\nExcellent written and verbal communication skills.\nDemonstrated ability to build strong relationships and influence stakeholders across technical and business functions.\nAct as a trusted advisor rather than simply a compliance reviewer, helping stakeholders understand the intent behind security and compliance requirements.\nPreferred Qualifications\nProfessional certification such as CISA, CRISC, CISSP, ISO 27001 Lead Auditor/Implementer, or equivalent.\nExperience with Loopio, Archer, ServiceNow or similar platforms.\nExperience supporting customer security questionnaires and security assurance activities.\nFamiliarity with SIG Core and SIG Lite questionnaires and their requirements.\nExperience working with external regulators, certification bodies, customers, or regulatory assessors.\nCompensation may vary depending on your location, qualifications including job-related education, training, experience, licensure, and certification, that could result at a level outside of these ranges. Certain roles are eligible for additional rewards, including annual bonus, and sales incentives depending on the terms of the applicable plan and role as well as individual performance.\n\nCA generally ranges: $127,002-$190,502\nAll other locations fall under our General State range: $111,405-$167,107\n\nBenefits may vary depending on the nature of your employment with Cloud Software Group and the country where you work. U.S. based employees are typically offered access to healthcare, life insurance and disability benefits, 401(k) plan and company match, among others. This requisition has no specific deadline for completion.About Us:\nCloud Software Group is one of the world’s largest cloud solution providers, serving more than 100 million users around the globe. When you join Cloud Software Group, you are making a difference for real people, each of whom count on our suite of cloud-based products to get work done - from anywhere. Members of our team will tell you that we value passion for technology and the courage to take risks. Everyone is empowered to learn, dream, and build the future of work. We are on the brink of another Cambrian leap -- a moment of immense evolution and growth. And we need your expertise and experience to do it. Now is the perfect time to move your skills to the cloud.\nCloud Software Group is firmly committed to Equal Employment Opportunity (EEO) and to compliance with all federal, state and local laws that prohibit employment discrimination. All qualified applicants will receive consideration for employment without regard to age, race, color, creed, sex or gender, sexual orientation, gender identity, gender expression, ethnicity, national origin, ancestry, citizenship, religion, genetic carrier status, disability, pregnancy, childbirth or related medical conditions (including lactation status), marital status, military service, protected veteran status, political activity or affiliation, taking or requesting statutorily protected leave and other protected classifications.\nCloud Software Group will consider qualified applicants with a criminal history and conduct the recruiting process in accordance with the California Fair Chance Act, Los Angeles County Fair Chance Ordinance for Employers and San Diego Fair Chance Ordinance. For access to the laws see the following links: California FCA and Los Angeles FCO.\nIf you need a reasonable accommodation due to a disability during any part of the application process, please contact us via the Bridge portal for assistance.","description_format":"text","description_chars":11965,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Life insurance"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["BI & Dashboard Software","Virtualization & Containers","Security Compliance","Integration & API Management"],"lifecycle":[{"event":"open","at":"2026-10-20T03:33:49Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 34 · green card filings: 43","filings_12m":34,"filings_prev_12m":86,"green_card_filings_12m":43,"median_offered_wage_usd":147695,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":6}],"liveness":{"score":56,"band":"ok","label":"Likely open","p_open":1,"p_active":0.626,"p_room":0.9,"age_days":11,"expected_fill_days":31,"reasons":["conf:3","stale_co","velocity","win:mid"],"computed_at":"2026-10-30T05:48:23Z"},"pay":{"stated_usd_annual":190502,"is_top_pay":true},"html_url":"https://alion.io/job/cloud-software-group-csa-security-analyst","json_url":"https://alion.io/job/cloud-software-group-csa-security-analyst.json","meta":{"generated_at":"2026-10-30T23:06:25Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":14207,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-31T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":8307},"rest":"https://alion.io/mcp/rest/get_company?id=8307"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcloud-software-group-csa-security-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcloud-software-group-csa-security-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcloud-software-group-csa-security-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/cloud-software-group-csa-security-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcloud-software-group-csa-security-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":2893199}},{"tool":"search_jobs","arguments":{"company":"cloud.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":2893199},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}