Description
As a Security Analyst at Lucid Software, you will protect corporate assets, web applications, and employees. You will focus on day-to-day GRC operations, third-party risk assessments, and championing customer trust.
Responsibilities:
- Conduct third-party vendor risk assessments and internal risk evaluations; identify, document, and report on potential vulnerabilities and control gaps.
- Respond to standard vendor security questionnaires and support internal teams in answering security-related questions.
- Track and collect evidence for ongoing SOC 2 and ISO 27001 compliance audits.
- Proactively identify emerging threats and collaborate with senior team members to develop practical security solutions.
- Coordinate and deliver security awareness training programs to employees.
- Ensure compliance with outside regulations affecting the Company.
- Collect and maintain impactful security and compliance metrics for team dashboards.
- Partner with Legal, Engineering, IT, Finance, and HR to ensure corporate security policies are understood and followed.
- Identify operational inefficiencies and areas for improvement in existing security controls.
Requirements:
- Bachelor’s degree in information security assurance, business management, or a related field.
- 3+ years of experience with third-party risk management, GRC, customer due diligence, etc.
- Understanding of common security frameworks and principles (e.g. NIST 800-53, ISO 27001, SOC 2).
- Strong organizational skills with the ability to manage tasks independently and meet deadlines.
- Excellent verbal and written skills.
- Strong interpersonal skills with a track record of building positive relationships across non-technical and technical teams.
Preferred Qualifications:
- Prior experience working within a modern SaaS environment or cloud-first technology company.
- Prior knowledge of and skill in applying risk management principles and practices.
- One or more preferred Certification(s): CRISC, CISSP, CISA, SSCP, CC, Security+, CySA+, etc.
- Strong understanding of cloud environments (AWS, GCP, or Azure).
- Experience with process improvement, efficiency enhancements, and automation of GRC and Security Assurance functions.