Staff Security Analyst, Customer Assurance

The Okta Security team’s mission is to strengthen Okta’s position as the leading Identity-as-a-Service solution by identifying and resolving risks to the employees, product, and most importantly, our customers. 

The Security Trust & Culture team works to enhance customer trust in Okta’s identity services . We serve as a strategic resource working closely with Okta’s go-to-market teams. The Customer Assurance team is the central hub for security information, providing comprehensive guidance and resources to Okta customers so they can effectively manage their risk. 

As a Senior level analyst of Customer Assurance, you will support prioritizing and efficiently responding to questions about our security program and other due diligence related requests. You will act as a critical bridge between our customers and our internal engineering teams, ensuring Okta’s security posture is communicated effectively.Tasks will include training local Sales teams, managing complex escalations in the regional market, and driving technological changes to help Customer Assurance scale its efforts globally.

This position requires a unique combination of skills including an ability to coordinate the analysis of technical issues, to communicate clearly about security-relevant topics with both internal and external customers, to collaborate with internal business units to ensure execution of time-sensitive projects, and to present to upper management or the broader organization as required.  The ideal candidate will have experience with SaaS cloud security risk assessment and a solid understanding of the core principles of identity management. If you want to make a difference in the security program of a global cloud provider, we want you on board. 

Job Duties and Responsibilities: 

• Serve as the critical bridge between Okta’s customers and internal Engineering/Product Security teams. You must be able to unpack complex customer security concerns, hold in-depth technical discussions with internal engineering to align on solutions, and translate Okta’s security architecture back to the customer to resolve high-stakes inquiries.
• Act as a bilingual "technical translator," converting deep-dive engineering specifications and vulnerability reports into clear, risk-based narratives that address customer concerns while protecting Okta’s intellectual property.
• Serve as the primary security advocate for Field Account Teams to provide technical clarity on Okta’s security posture, roadmap, and incident response protocols.
• Collaborate with Product and Engineering teams to "pre-digest" upcoming features and security enhancements, ensuring the Field teams are armed with accurate technical talking points before customers even ask.
• Take end-to-end ownership of highly technical security questionnaires and due-diligence requests, Partner seamlessly with internal subject matter experts -including our specialized Federal/FedRAMP teams—to ensure accurate, timely, and high-quality responses for highly regulated customers.
• Drive technological changes within Customer Assurance by identifying and implementing AI and automation strategies to streamline workflows, scale global efforts, and reduce response times.
• Train and empower regional Go-To-Market and Sales teams on standard engagement protocols, ensuring they can leverage Customer Assurance resources smoothly to accelerate deals.
• Collaborate with the Security Trust & Culture team and Regional CSOs to develop, publish, and maintain forward-facing security collateral, FAQs, and field communications.
• Work within a global team, participating or leading global handoffs between American timezones and European or Asian, when required for large security or industry events. 

Requirements:

• Bachelor’s degree in Computer Science or Management Information Systems, or equivalent work experience  in technology or information security fields
• Minimum 3 years information security, project management, or related experience
• A strong, fundamental understanding of core Security principles, architectures, and operations.
• Understanding of IT and cloud methodologies, information security, privacy, identity management, risk assessments and IT regulation and compliance standards 
• Strong oral, written, and presentation skills
• Strong written and verbal communication skills, with a proven ability to distill complex technical concepts into clear, concise responses for both technical customers and internal executive stakeholders.
• Ability to engage in "whiteboard-level" security discussions with customer CISOs and architects, specifically regarding cloud infrastructure, API security, and encryption standards.
• Demonstrated experience managing the "tension" between technical limitations and customer expectations, with a knack for finding creative ways to say "yes" to security requirements through compensating controls.
• Strong ability to pivot from a "checker" (simply answering questions) to a "consultant" (helping the customer and Field teams understand the why behind Okta’s security controls).
  
  

Helpful Certifications / Skills:

• Okta Certified Professional/Administrator
• Certificate of Cloud Security Knowledge (CCSK) and/or Certificate of Cloud Auditing Knowledge (CCAK)
• Certified Information Security Auditor (CISA)
• Experience with generative AI tools or process automation platforms is a strong plus.
• Familiarity with Federal or highly regulated compliance frameworks (e.g., FedRAMP, StateRAMP, NIST 800-53, or DoD IL4/IL5/IL6)

#LI-HYBRID

#LI-SH1
P7020_3396428