Security Analyst III

Lucid; Raleigh (NC); Hybrid; USD 80,000 - 120,000; Full time

Job summary

Lucid Software, a leader in visual collaboration, seeks a Security Analyst to safeguard corporate assets and web applications. You will drive day-to-day GRC operations, vendor risk assessments, and support SOC 2 and ISO 27001 audits while helping maintain customer trust and regulatory compliance.

You will collaborate with Legal, Engineering, IT, Finance, and HR to implement effective security controls and metrics, fostering a proactive risk culture across the organization.

Qualifications

• Bachelor’s degree in information security assurance, business management, or a related field.
• 3+ years of experience with third party risk management, GRC, customer due diligence, etc.
• Understanding of common security frameworks and principles (e.g., NIST 800-53, ISO 27001, SOC 2, etc). Strong organizational skills with the ability to manage tasks independently and meet deadlines with minimal oversight on daily routines.
• Excellent verbal and written skills; comfortable translating security concepts into clear documentation.
• Strong interpersonal skills with a track record of building positive relationships across non-technical teams (like Legal, HR, Finance) and technical teams (like IT and Engineering) to resolve security risks collaboratively.

Responsibilities

• Conduct third-party vendor risk assessments and internal risk evaluations; identify, document, and report on potential vulnerabilities and control gaps.
• Respond to standard vendor security questionnaires and support internal teams in answering security-related questions from prospects.
• Track and collect evidence for ongoing SOC 2 and ISO 27001 compliance audits.
• Proactively identify emerging threats and associated risks to existing business processes and corporate assets, and collaborate with senior team members to develop practical security solutions.
• Coordinate and deliver security awareness training programs to employees to foster a strong security culture.
• Assure compliance with outside regulations affecting the Company.
• Collect and maintain impactful security and compliance metrics for team dashboards.
• Partner with Legal, Engineering, IT, Finance, and HR to ensure corporate security policies are understood and followed.
• Identify operational inefficiencies and areas for improvement in existing security controls, and help design smoother workflows.

Skills

Vendor risk assessments

GRC

SOC 2

ISO 27001

Security frameworks

Security documentation

Cloud security

Stakeholder communication

Risk assessment

Education

Bachelor’s degree in information security/related field

Tools

AWS

Azure

GCP

Job description

Lucid Software is the leader in visual collaboration and work acceleration, helping teams turn ideas into reality. Our products, business, and workplace culture have earned recognition, including Forbes Cloud 100 and Fortune Best Workplace in Technology. Lucid is a hybrid workplace, allowing employees to work remotely, from an office, or a combination depending on the role and team needs. We uphold our core values of teamwork over ego, innovation, individual empowerment, initiative, ownership, passion, and excellence, and we strive to create an environment that is respectful and inclusive for everyone.

As a Security Analyst at Lucid Software, you will protect our corporate assets, world-class web applications, and employees. You will focus on day-to-day GRC operations, third-party risk assessments, and championing customer trust. Our security team fosters an environment where business and development can quickly adapt and innovate. We stay current with evolving security, legal, and business requirements through a risk and compliance mindset. Our mission is to protect and support the objectives of the business.

Responsibilities

• Conduct third-party vendor risk assessments and internal risk evaluations; identify, document, and report on potential vulnerabilities and control gaps.
• Respond to standard vendor security questionnaires and support internal teams (e.g., Sales, Customer Success) in answering security-related questions from prospects.
• Track and collect evidence for ongoing SOC 2 and ISO 27001 compliance audits.
• Proactively identify emerging threats and associated risks to existing business processes and corporate assets, and collaborate with senior team members to develop practical security solutions.
• Coordinate and deliver security awareness training programs to employees to foster a strong security culture.
• Assure compliance with outside regulations affecting the Company
• Collect and maintain impactful security and compliance metrics for team dashboards.
• Partner with Legal, Engineering, IT, Finance, and HR to ensure corporate security policies are understood and followed.
• Identify operational inefficiencies and areas for improvement in existing security controls, and help design smoother workflows.

Requirements

• Bachelor’s degree in information security assurance, business management, or a related field
• 3+ years of experience with third party risk management, GRC, customer due diligence, etc.
• Understanding of common security frameworks and principles (e.g., NIST 800-53, ISO 27001, SOC 2, etc). Strong organizational skills with the ability to manage tasks independently and meet deadlines with minimal oversight on daily routines.
• Excellent verbal and written skills; comfortable translating security concepts into clear documentation.
• Strong interpersonal skills with a track record of building positive relationships across non-technical teams (like Legal, HR, Finance) and technical teams (like IT and Engineering) to resolve security risks collaboratively.

Preferred Qualifications

• Prior experience working within a modern SaaS environment or cloud-first technology company, with a basic familiarity of how cloud applications operate.
• Prior knowledge of and skill in applying risk management principles and practices
• One or more preferred Certification(s): CRISC, CISSP, CISA, SSCP, CC, Security+, CySA+, etc.
• Strong understanding of cloud environments (AWS, GCP, or Azure).
• Experience with process improvement, efficiency enhancements, and automation of GRC and Security Assurance functions. Ability to use AI tools to enhance and enable workflows and automation.