Security Trust Analyst

Job Title: Security Trust Analyst
 

Job Description Summary
At RingCentral, security, global availability, and always-on reliability are core differentiators. RingCentral services must deliver robust functionality that is ecure,reliable, and trusted by customers, no matter where they are. RingCentral’s Security team, partners closely with relevant teams such as network, application, and product teams to embed security across our products, services, and third party ecosystems.
Within Information Security, the Security Trust team focuses on trust and enablement: creating Security Trust assets that communicate RingCentral’s security posture, managing third-party risk, and fostering confidence among customers, partners, and the public. The Security Trust Analyst plays a critical role in helping ensure the security, reliability, and integrity of RingCentral’s products, services, and vendors. This role supports both customer assurance and third party risk management (TPRM) by translating complex legal, regulatory, and security requirements into actionable controls, assessments, and documentation that guide customer and sales engagements, and vendor evaluations. This position helps mitigate risk and ensure compliance is integrated into every stage of the customer and vendor lifecycle.This is an exciting opportunity to grow within a security concentration that is quickly evolving and bridges security, risk, and trust. The ideal candidate is a professional who is excited by the explosion of advancements occurring in security, data, and artificial intelligence. As a member of the team, creative thinking, a solid work ethic, and a passion for developing and delivering great solutions are a must.

Responsibilities:
● Customer and Trust Enablement
○ Collaborate cross functionally with Security, Legal, Sales, and Product teams to enable transparent and efficient customer engagements.
○ Review and approve customer facing materials such as RFPs, questionnaires, and whitepapers to verify the accuracy of security and compliance information.
○ Maintain and improve the library of customer assurance materials, including certifications, security summaries, and trust documentation.
○ Translate complex security and compliance topics into clear, customer-friendly language that builds confidence in RingCentral’s posture.
● Third-Party Risk Management (TPRM)
○ Conduct vendor security assessments, including collecting and evaluating security documentation.
○ Identify, document, and track vendor risk through the assessment lifecycle ensuring appropriate remediation and ongoing monitoring.
○ Partner with Legal and Procurement teams to ensure security and risk requirements are integrated into contracting and the vendor management process.
○ Develop reports and metrics to communicate vendor risk trends, remediation progress, and program performance to leadership.
○ Continuously improve assessment workflows to enhance efficiency, transparency, and alignment within RingCentral’s risk appetite.
● Governance and Continuous Improvement
○ Promote adoption of security and trust processes through training, documentation, and communication initiatives.
○ Collaborate with internal Audit and Compliance teams to support audits, certifications, and evidence collection activities.
○ Support the development and maintenance of security policies, standards, and procedures related to vendor management and customer assurance.
○ Identify emerging risks and technologies, process gaps, and opportunities to strengthen RingCentral’s overall trust and risk management practices.

Qualifications:
● 2+ years of professional experience in a Security, Risk, or Enablement role with a focus on Governance, Risk, and Compliance (GRC), Third-Party Risk Management (TPRM), or Security Trust.
● Strong understanding of enterprise security principles, vendor risk management, and compliance/industry best practices.
● Working knowledge of Python, Javascript, R to support API integrations
● Demonstrated experience using automation or AI driven tools to streamline security assessments, reporting, or assurance processes.
● Technical Writing: Exceptional written communication and attention to detail, with the ability to translate complex security concepts into clear, accurate, and customer facing documentation.
● Proven ability to partner with Sales, Legal, Privacy, and Engineering to improve customer assurance workflows and promote adoption of security initiatives.
● Strong problem-solving and data analysis skills with the ability to interpret and visualize security metrics for leadership reporting.
● Strong communication and interpersonal skills with the ability to explain complex security concepts to technical and non-technical audiences.
● Ability to work independently and as part of a team.
● Bachelor's degree in Computer Science, Information Security, or a related technical field,or equivalent practical experience.

Bonus Points (Nice to Have):
● Relevant security certifications such as CISA.
● Experience working in a fast paced SaaS or cloud based environment.
● Experience with automation platforms, workflow orchestration, or AI for GRC or TPRM.
● Familiarity with security and compliance frameworks( e.g., SOC 2, ISO 27001,NIST).