Senior GRC & Security Analyst — SaaS & Cloud Risk

Kickstart Seed Fund; Raleigh (NC); Hybrid; USD 85,000 - 120,000; Full time

Job summary

Lucid Software is a hybrid workplace evolving to support remote work, in-office, or a mix depending on the role. As a Security Analyst, you will protect corporate assets, web apps, and employees, focusing on day-to-day GRC operations, vendor risk assessments, and shaping our customer trust program.

You will support SOC 2 and ISO 27001 compliance, identify threats, deliver security awareness training, and collaborate with Legal, IT, and Finance to ensure security policies are followed.

Qualifications

• Bachelor’s degree in information security assurance, business management, or a related field.
• 3+ years of experience with third party risk management, GRC, customer due diligence, etc.
• Understanding of common security frameworks and principles (e.g. NIST 800-53, ISO 27001, SOC 2)
• Excellent verbal and written skills; translating security concepts into documentation.
• Strong interpersonal skills with cross-functional collaboration to resolve security risks.

Responsibilities

• Conduct third-party vendor risk assessments and internal risk evaluations; identify, document, and report on potential vulnerabilities and control gaps.
• Respond directly to standard vendor security questionnaires and support internal teams in answering security-related questions from prospects.
• Track and collect evidence for ongoing SOC 2 and ISO 27001 compliance audits.
• Proactively identify emerging threats and collaborate with senior team members to develop practical security solutions.
• Coordinate and deliver security awareness training programs to employees to foster a strong security culture.
• Assure compliance to outside regulations affecting the Company
• Collect and maintain impactful security and compliance metrics for team dashboards.
• Partner with Legal, Engineering, IT, Finance, and HR to ensure corporate security policies are understood and followed.
• Identify operational inefficiencies and areas for improvement in existing security controls, and help design smoother workflows.

Skills

Third-party risk management

GRC

Security governance

Documentation & reporting

Education

Bachelor’s degree in information security assurance, business management, or related field

Job description

Lucid Software is a hybrid workplace evolving to support remote work, in-office, or a mix depending on the role. As a Security Analyst, you will protect corporate assets, web apps, and employees, focusing on day-to-day GRC operations, vendor risk assessments, and shaping our customer trust program.

You will support SOC 2 and ISO 27001 compliance, identify threats, deliver security awareness training, and collaborate with Legal, IT, and Finance to ensure security policies are followed.