Security & GRC Analyst III — SaaS Risk & Compliance

Kickstart Seed Fund; Salt Lake City (UT); Hybrid; USD 90,000 - 120,000; Full time

Job summary

Lucid Software is seeking a Security Analyst to protect corporate assets and customer trust. You will execute day-to-day GRC operations, assess third-party risks, and support audits (SOC 2, ISO 27001).

The role collaborates with Legal, Engineering, IT, Finance, and HR to ensure policy compliance and measurable security improvements. The ideal candidate has 3+ years in GRC, a bachelor’s degree in a related field, and strong communication skills to translate security concepts into clear

Qualifications

• Bachelor’s degree in information security assurance, business management, or a related field.
• 3+ years of experience with third party risk management, GRC, customer due diligence, etc.
• Understanding of common security frameworks and principles (e.g. NIST 800-53, ISO 27001, SOC 2, etc). Strong organizational skills with the ability to manage tasks independently and meet deadlines with minimal oversight on daily routines.

Responsibilities

• Conduct third-party vendor risk assessments and internal risk evaluations; identify, document, and report on potential vulnerabilities and control gaps.
• Respond directly to standard vendor security questionnaires and support internal teams (i.e. Sales, Customer Success, etc.) in answering security-related questions from prospects.
• Track and collect evidence for ongoing SOC 2 and ISO 27001 compliance audits.
• Proactively identify emerging threats and associated risks to existing business processes and corporate assets, and collaborate with senior team members to develop practical security solutions.
• Coordinate and deliver security awareness training programs to employees to foster a strong security culture.
• Assure compliance to outside regulations affecting the Company
• Collect and maintain impactful security and compliance metrics for team dashboards.
• Partner with Legal, Engineering, IT, Finance, and HR to ensure corporate security policies are understood and followed.
• Identify operational inefficiencies and areas for improvement in our existing security controls, and help design smoother workflows.

Skills

GRC

Vendor risk assessments

Security frameworks

Communication

Interpersonal skills

Education

Bachelor’s degree in information security assurance, business management, or a related field

Tools

NIST 800-53

ISO 27001

SOC 2

AWS

GCP

Azure

Job description

Lucid Software is seeking a Security Analyst to protect corporate assets and customer trust. You will execute day-to-day GRC operations, assess third-party risks, and support audits (SOC 2, ISO 27001).

The role collaborates with Legal, Engineering, IT, Finance, and HR to ensure policy compliance and measurable security improvements. The ideal candidate has 3+ years in GRC, a bachelor’s degree in a related field, and strong communication skills to translate security concepts into clear