Senior Security & Data Analyst

The Senior Security and Data Analyst supports Manhattan’s Legal Department across information security, data protection, customer assurance, and licensing compliance. This role partners across Legal, Global Security, Compliance, Product Management, R and D, Sales, and client stakeholders to manage security assessments, due diligence responses, and pre-sales requests for Manhattan’s SaaS environment.

Key Responsibilities

• Maintain the Manhattan Trust Center, ensuring security, privacy, compliance, and customer-assurance materials are accurate, current, well organized, and available.
• Monitor and analyze new and evolving global data protection laws, regulations, regulatory guidance, and industry requirements, assessing potential impacts on products, services, contracts, and operations.
• Coordinate with Legal, Global Security, Compliance, Product Management, and other stakeholders to support implementation of new legal, regulatory, and security requirements.
• Support potential clients during pre-sales activities by addressing Manhattan security controls, privacy program, compliance posture, and security assessments.
• Prepare, review, and present responses for client security questionnaires, due diligence requests, RFP requirements, audits, and related information requests.
• Respond to internal and external requests for information related to security, privacy, compliance, and data protection.
• Champion security and data protection policies, procedures, and control requirements across relevant teams.
• Assist with security-related escalations and incident investigations, including gathering facts, coordinating with subject-matter experts, documenting findings, and supporting timely resolution.
• Serve as a liaison to Sales Executives on licensing compliance matters, identifying issues, coordinating internal review, and contributing to commercially practical resolutions.
• Draft clear, accurate, and well-supported exceptions, deviations, risk explanations, compensating-control narratives, and other written responses.
• Maintain appropriate documentation for work performed, decisions made, customer requests, assessments, exceptions, and resulting actions.
• Support the ongoing development of industry-standard security and privacy practices in Manhattan’s cloud environment.
• Perform other duties assigned by the Vice President – Contracts and Corporate Administration / Data Protection Officer.

Required Qualifications

• Bachelor’s degree or equivalent combination of education and relevant experience.
• 5+ years of experience in information security, privacy, data protection, compliance, technology risk, legal operations, or a related field.
• Sound judgment, independent execution, strong client communication, and the ability to translate technical and regulatory requirements into clear written analysis and actionable recommendations.
• 5+ years of experience supporting customer due diligence, security questionnaires, vendor assessments, audits, RFPs, or pre-sales activities.
• Ability to analyze and explain the practical business impact of new global data protection laws and regulatory requirements.
• Strong client presentation skills for communicating with technical, legal, procurement, privacy, security, and executive audiences.
• Excellent writing skills for describing issues, risks, rationale, proposed limitations, and compensating controls clearly and persuasively.
• Strong written and verbal communication, analytical, problem-solving, organizational, and interpersonal skills.
• Ability to manage multiple priorities, meet deadlines, work independently with limited day-to-day supervision, and exercise sound judgment.
• Ability to handle confidential information with discretion and professionalism.
• Self-motivated, solution-focused, and able to make decisions independently within established guidelines.

Preferred Skills and Experience

• Familiarity with security and compliance frameworks and controls, including SOC 1, SOC 2, ISO 27001, PCI DSS, or similar standards.
• Understanding of cloud, application, network, operating-system, database, and access-control security concepts.
• Experience interpreting security assessments, control descriptions, policies, certifications, audit materials, and threat or risk information.
• Experience participating in incident investigations, security escalations, or risk-mitigation activities.
• Experience working across multiple development, security, operations, legal, or commercial teams.

Location and Work Setting

Atlanta, GA (onsite).