Senior Security & Compliance Analyst

About the role

We create possibilities that move life and commerce forward

Welcome to Manhattan. Every day, our supply chain commerce technology connects two billion people to 20 billion consumer choices. In the warehouse, on the road and in the store, we make what was once impossible, possible. If you want to tackle complex problems and redefine markets, you've come to the right place.

The Senior Security and Data Analyst supports Manhattan's Legal Department on information security, data protection, customer assurance, and licensing compliance matters. The role serves as a bridge between Legal, Global Security, Compliance, Product Management, R&D, Sales, and prospective and existing clients.

The Senior Security and Data Analyst will help protect company, customer, and partner information in Manhattan's SaaS environment; maintain the Manhattan Trust Center; analyze new global data protection requirements; and provide clear, practical responses to customer security assessments and pre-sales requests.

Responsibilities

• Maintain the Manhattan Trust Center, including the accuracy, currency, organization, and availability of security, privacy, compliance, and customer-assurance materials.
• Monitor and analyze new and evolving global data protection laws, regulations, regulatory guidance, and industry requirements; assess their potential impact on Manhattan's products, services, contracts, and operations.
• Coordinate with Legal, Global Security, Compliance, Product Management, and other stakeholders to support implementation of new legal, regulatory, and security requirements.
• Work with potential clients during the pre-sales process regarding Manhattan's security controls, privacy program, compliance posture, and security assessments of Manhattan.
• Prepare, review, and present responses to client security questionnaires, due diligence requests, RFP requirements, audits, and related information requests.
• Respond to internal and external client requests for security, privacy, compliance, and data protection information.
• Help champion security and data protection policies, procedures, and control requirements across relevant teams.
• Assist with security-related escalations and incident investigations, including gathering facts, coordinating with subject-matter experts, documenting findings, and supporting timely resolution.
• Serve as a liaison to Sales Executives on licensing compliance matters, including identifying issues, coordinating internal review, and helping develop commercially practical resolutions.
• Draft clear, accurate, and well-supported exceptions, deviations, risk explanations, compensating-control narratives, and related written responses.
• Maintain appropriate documentation for work performed, decisions made, customer requests, assessments, exceptions, and resulting actions.
• Support the continued development of industry-standard security and privacy practices in Manhattan's cloud environment.
• Perform other duties as assigned by the Vice President - Contracts and Corporate Administration / Data Protection Officer.

Requirements

• Bachelor's degree or equivalent combination of education and relevant experience.
• 5+ years experience in information security, privacy, data protection, compliance, technology risk, legal operations, or a related field.
• Knowledge of Manhattan applications, platforms, products, and related security controls preferred.
• Experience working with SaaS, enterprise software, cloud environments, or technology-enabled services.
• The role requires sound judgment, independent execution, strong client communication, and the ability to translate technical and regulatory requirements into clear written analysis and actionable recommendations.
• 5+ years experience supporting customer due diligence, security questionnaires, vendor assessments, audits, RFPs, or pre-sales activities.
• Ability to analyze and explain the practical business impact of new global data protection laws and regulatory requirements.
• Strong client presentation skills, including the ability to communicate effectively with technical, legal, procurement, privacy, security, and executive audiences.
• Excellent writing skills, with the ability to describe issues, risks, rationale, proposed limitations, and compensating controls clearly and persuasively.
• Strong written and verbal communication, analytical, problem-solving, organizational, and interpersonal skills.
• Ability to manage multiple priorities, meet deadlines, work independently with limited day-to-day supervision, and exercise sound judgment.
• Ability to handle confidential information with discretion and professionalism.
• Self-motivated, solution-focused, and able to make decisions independently while working within established guidelines.

Preferred skills and experience

• Familiarity with security and compliance frameworks and controls, including SOC 1, SOC 2, ISO 27001, PCI DSS, or similar standards.
• Understanding of cloud, application, network, operating-system, database, and access-control security concepts.
• Experience interpreting security assessments, control descriptions, policies, certifications, audit materials, and threat or risk information.
• Experience participating in incident investigations, security escalations, or risk-mitigation activities.
• Experience working across multiple development, security, operations, legal, or commercial teams.

• #LI-GW1
• Committed to diversity and inclusion

• At Manhattan, it's about more than just the work.
• From cultural celebrations to interest groups to volunteer opportunities, your true self is always welcome here.
• Our team members' backgrounds, experiences and perspectives add to us as a whole and make us unique.