Description
As a Security Analyst at Lucid Software, you will protect corporate assets, web applications, and employees. You will focus on executing day-to-day GRC operations, third-party risk assessments, and championing customer trust.
Responsibilities:
- Conduct third-party vendor risk assessments and internal risk evaluations; identify, document, and report on potential vulnerabilities and control gaps.
- Respond to standard vendor security questionnaires and support internal teams in answering security-related questions from prospects.
- Track and collect evidence for ongoing SOC 2 and ISO 27001 compliance audits.
- Proactively identify emerging threats and associated risks to existing business processes and corporate assets, and collaborate with senior team members to develop practical security solutions.
- Coordinate and deliver security awareness training programs to employees to foster a strong security culture.
- Ensure compliance with outside regulations affecting the Company.
- Collect and maintain impactful security and compliance metrics for team dashboards.
- Partner with Legal, Engineering, IT, Finance, and HR to ensure corporate security policies are understood and followed.
- Identify operational inefficiencies and areas for improvement in existing security controls, and help design smoother workflows.
Requirements:
- Bachelor’s degree in information security assurance, business management, or a related field.
- 3+ years of experience with third-party risk management, GRC, customer due diligence, etc.
- Understanding of common security frameworks and principles (e.g. NIST 800-53, ISO 27001, SOC 2, etc.).
- Strong organisational skills with the ability to manage tasks independently and meet deadlines with minimal oversight.
- Excellent verbal and written skills; comfortable translating security concepts into clear documentation.
- Strong interpersonal skills with a track record of building positive relationships across non-technical and technical teams.
Preferred Qualifications:
- Prior experience working within a modern SaaS environment or cloud-first technology company.
- Prior knowledge of and skill in applying risk management principles and practices.
- One or more preferred Certification(s): CRISC, CISSP, CISA, SSCP, CC, Security+, CySA+, etc.
- Strong understanding of cloud environments (AWS, GCP, or Azure).
- Experience with process improvement, efficiency enhancements, and automation of GRC and Security Assurance functions.