InformationSecurityAnalyst/Engineer

## Description Information Security Analyst / Engineer GRC & Customer Assurance – Mid-Level Location: Atlanta, GA Experience: 5+ years in Information Security, GRC, or related IT discipline Level: P18 Role Summary Foxit is seeking a mid-level Information Security Analyst / Engineer to support the protection of company information assets while enabling business growth through strong governance, risk, compliance, and customer assurance practices. This role will partner closely with Sales, Customer Success, Legal, IT, Engineering, and business teams to support customer security requirements, manage audit readiness, strengthen GRC processes, and help maintain Foxit’s Information Security Management System. The ideal candidate can translate technical security controls into clear, business-friendly language and support both internal security operations and external customer assurance needs. Key Responsibilities Customer & Business Security Support Respond to customer security questionnaires, RFIs, RFPs, audits, and due diligence requests Partner with Sales, Customer Success, and Legal to address security and compliance requirements during pre-sales and post-sales cycles Maintain a centralized library of security documentation, including policies, certifications, architecture diagrams, and standard responses Clearly communicate security controls, risks, and compliance posture to customers and business stakeholders Governance, Risk & Compliance Support and improve GRC processes aligned with ISO 27001, NIST CSF, SOC 2, and other relevant frameworks Help maintain and mature Foxit’s Information Security Management System Conduct risk assessments and support risk treatment and remediation plans Manage security control documentation, testing, and evidence collection Support policy lifecycle management, including creation, review, approval, and enforcement Coordinate with control owners across IT, Engineering, HR, Finance, Legal, and Operations Assist with GRC tool implementation