InfoSec RFP Analyst
Who we are:
Motive builds technology to improve the safety, productivity, and profitability of businesses that power the physical economy. Motive combines IoT hardware with AI-powered applications to connect and automate physical operations. Motive is one of the fastest-growing software companies in the world, serving more than 120,000 businesses, across a wide range of industries including trucking and logistics, construction, oil and gas, food and beverage, field service, agriculture, passenger transit, and delivery.
Motive is built on four foundational attributes; Own It, Less but Better, Build Trust, and Unlock Potential. This has taken our company to great heights, including being recognized by Fortune for Best Workplaces, Forbes Best Startup Employers, and Comparably for our Best Global Culture, Sales Team, Leadership Team, Career Growth, and CEO for Diversity. We’re proud to receive an employee net promoter score of 63 (according to Comparably) which places Motive in the top 5% of companies with 4,000 employees or more.
Today, our team is made up of more than 3,000 employees, located across the world, providing support to a wide range of customers. While most of our employees are remote, many have the opportunity to work on-site at any of our 8 global office locations. Visit our careers website to learn more about opportunities at Motive.
About the Role:
This position is responsible for all formal responses regarding the Motive Information Security Program. This includes Requests for Proposals (“RFPs”), contract renewals, audit preparation, Vendor Assessments and other responses as needed. Additionally, this role will work with various stakeholders to document / update information security policies, processes and procedures as deemed appropriate.
What You’ll Do:
- Understand Motive's security controls, policies and procedures as it relates to internal processes and across customer product lines.
- Draft responses to security questionnaires received from customers, prospects and vendors.
- Stay abreast and knowledgeable of the changing security landscape internally and externally as an SME.
- Maintain and monitor progress of the Vendor Risk Profile including periodic reporting to management on possible 3rd party security exposures and the corresponding mitigation activities.
- Interface with customers on their questions surrounding information and application security.
- Monitor IT control processes to ensure current state responses.
- Maintain an understanding of the different computing environments at Motive including the controls in place.
- Develop and implement information security policies, processes and procedures where necessary.
- Participate in other projects or duties.
- Solid understanding of technology environments and their components including the risks associated with their use.
- Strong written and verbal communication skills.
- Ability to effectively communicate with other areas of the company.
What We’re Looking For:
- Bachelor’s degree in related field
- Two (2) plus years of experience in IT audit, IT security or Systems Administration
- Experience documenting information security policies, processes and procedures or similarly structured documentation is a plus.
- Technical writing experience in the software industry is preferred
- CISA or equivalent certification is preferred.
- Proactive attitude and comfortable working under pressure strict deadlines
- Demonstrated ability to think critically, problem solve and simplify complexity
- High level understanding of cloud infrastructure
- High level understanding of NIST framework, ISO 27001,or SOC frameworks
- Worked as a technical project manager would be a plus
- Proven self-starter, requiring little supervision to take initiative and execute above duties
Creating a diverse and inclusive workplace is one of Motive's core values. We are an equal opportunity employer and welcome people of different backgrounds, experiences, abilities and perspectives.
Please review our Candidate Privacy Notice here.
The applicant must be authorized to receive and access those commodities and technologies controlled under U.S. Export Administration Regulations. It is Motive's policy to require that employees be authorized to receive access to Motive products and technology.
#LI-Remote