Remote Security Risk & Compliance Analyst III

Lucid Software; Raleigh (NC); Hybrid; USD 90,000 - 120,000; Full time

Job summary

Lucid Software, a hybrid workplace enabling remote, office, or mixed arrangements, seeks an experienced security risk professional to lead third-party risk management and GRC activities. You will evaluate vendor risk, respond to security questionnaires, and support SOC 2 and ISO 27001 processes.

The role requires 3+ years in risk management, strong knowledge of security frameworks, and excellent communication. Collaboration with Legal, IT, and Finance is essential.

Qualifications

• Bachelor’s degree in information security assurance, business management, or related field.
• 3+ years of experience with third party risk management, GRC, customer due diligence.
• Understanding of common security frameworks (NIST 800-53, ISO 27001, SOC 2).
• Excellent verbal and written skills; able to translate security concepts into clear documentation.
• Strong interpersonal skills to collaborate with Legal, HR, Finance, IT and Engineering to resolve risks.

Responsibilities

• Conduct third-party vendor risk assessments and internal risk evaluations; identify vulnerabilities and control gaps.
• Respond to standard vendor security questionnaires and support internal teams with security questions from prospects.
• Track and collect evidence for SOC 2 and ISO 27001 compliance audits.
• Identify emerging threats and risks, and collaborate with senior team members on security solutions.
• Coordinate and deliver security awareness training programs for employees.
• Assure compliance with applicable outside regulations.
• Collect and maintain security and compliance metrics for team dashboards.
• Partner with Legal, Engineering, IT, Finance, and HR to ensure security policies are understood and followed.
• Identify operational inefficiencies and help design smoother workflows.

Skills

Third-Party Risk

GRC

Security Frameworks

Documentation

Stakeholder Collaboration

Education

Bachelor’s degree in information security or related field

Job description

Lucid Software, a hybrid workplace enabling remote, office, or mixed arrangements, seeks an experienced security risk professional to lead third-party risk management and GRC activities. You will evaluate vendor risk, respond to security questionnaires, and support SOC 2 and ISO 27001 processes.

The role requires 3+ years in risk management, strong knowledge of security frameworks, and excellent communication. Collaboration with Legal, IT, and Finance is essential.