Security Risk & Compliance Analyst (Hybrid/Remote)

Lucid; Salt Lake City (UT); Hybrid; USD 70,000 - 100,000; Full time

Job summary

Lucid is seeking a Security Analyst to protect corporate assets, including web applications and employees. You will work within a security team that supports risk and compliance with a focus on protecting business objectives.

The role involves analyzing security risks, developing policies, and collaborating with Legal, IT, Engineering, Finance, and HR to implement improvements across the organization. This position offers a hybrid work model with opportunities to influence security posture.

Qualifications

• Bachelor’s degree in information security assurance, business management, or a related field.
• 1+ years experience with third party risk management, GRC, customer due diligence, etc.
• Understanding of common security frameworks and principles (e.g. NIST 800-53, ISO 27001, SOC 2)
• Security-related certifications such as SSCP, CC, Security+, CySA+ are a plus.

Responsibilities

• Identify and report security risks from vendor assessments, vulnerability scans, and risk discussions.
• Proactively identify threats and develop solutions.
• Develop and coordinate security and compliance policies and training.
• Assist in ensuring compliance with outside regulations affecting the company.
• Answer questions from internal and external customers about the security program.

Skills

Risk management

GRC

Security frameworks

Technical writing

Cross-team collaboration

Education

Bachelor’s degree in information security or related field

Job description

Lucid is seeking a Security Analyst to protect corporate assets, including web applications and employees. You will work within a security team that supports risk and compliance with a focus on protecting business objectives.

The role involves analyzing security risks, developing policies, and collaborating with Legal, IT, Engineering, Finance, and HR to implement improvements across the organization. This position offers a hybrid work model with opportunities to influence security posture.