# Security Analyst

**Company**: Lucid Software
**Location**: Salt Lake City, UT
**Work arrangement**: hybrid
**Experience**: senior
**Job type**: full-time
**Category**: Security
**Industry**: Technology

**Apply**: https://job-boards.greenhouse.io/lucidsoftware/jobs/6117122004?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_68f8fc57-2ad

## Description

As a Security Analyst at Lucid Software, you will protect corporate assets, web applications, and employees. You will focus on day-to-day GRC operations, third-party risk assessments, and championing customer trust.

Responsibilities:

- Conduct third-party vendor risk assessments and internal risk evaluations; identify, document, and report on potential vulnerabilities and control gaps.

- Respond to standard vendor security questionnaires and support internal teams in answering security-related questions.

- Track and collect evidence for ongoing SOC 2 and ISO 27001 compliance audits.

- Proactively identify emerging threats and collaborate with senior team members to develop practical security solutions.

- Coordinate and deliver security awareness training programs to employees.

- Ensure compliance with outside regulations affecting the Company.

- Collect and maintain impactful security and compliance metrics for team dashboards.

- Partner with Legal, Engineering, IT, Finance, and HR to ensure corporate security policies are understood and followed.

- Identify operational inefficiencies and areas for improvement in existing security controls.

Requirements:

- Bachelor’s degree in information security assurance, business management, or a related field.

- 3+ years of experience with third-party risk management, GRC, customer due diligence, etc.

- Understanding of common security frameworks and principles (e.g. NIST 800-53, ISO 27001, SOC 2).

- Strong organizational skills with the ability to manage tasks independently and meet deadlines.

- Excellent verbal and written skills.

- Strong interpersonal skills with a track record of building positive relationships across non-technical and technical teams.

Preferred Qualifications:

- Prior experience working within a modern SaaS environment or cloud-first technology company.

- Prior knowledge of and skill in applying risk management principles and practices.

- One or more preferred Certification(s): CRISC, CISSP, CISA, SSCP, CC, Security+, CySA+, etc.

- Strong understanding of cloud environments (AWS, GCP, or Azure).

- Experience with process improvement, efficiency enhancements, and automation of GRC and Security Assurance functions.

## Skills

### Required
- GRC
- third-party risk management
- customer due diligence
- NIST 800-53
- ISO 27001
- SOC 2
- security frameworks
- organizational skills
- verbal communication
- written communication
- interpersonal skills

### Nice to have
- SaaS environment
- cloud-first technology company
- risk management principles
- CRISC
- CISSP
- CISA
- SSCP
- CC
- Security+
- CySA+
- AWS
- GCP
- Azure
- process improvement
- efficiency enhancements
- automation of GRC and Security Assurance functions

---

Source: [Apply at job-boards.greenhouse.io](https://job-boards.greenhouse.io/lucidsoftware/jobs/6117122004?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)