Senior Security & GRC Analyst - Remote Vendor Risk

Lucid; Raleigh (NC); Hybrid; USD 80,000 - 120,000; Full time

Job summary

Lucid Software, a leader in visual collaboration, seeks a Security Analyst to safeguard corporate assets and web applications. You will drive day-to-day GRC operations, vendor risk assessments, and support SOC 2 and ISO 27001 audits while helping maintain customer trust and regulatory compliance.

You will collaborate with Legal, Engineering, IT, Finance, and HR to implement effective security controls and metrics, fostering a proactive risk culture across the organization.

Qualifications

• Bachelor’s degree in information security assurance, business management, or a related field.
• 3+ years of experience with third party risk management, GRC, customer due diligence, etc.
• Understanding of common security frameworks and principles (e.g., NIST 800-53, ISO 27001, SOC 2, etc). Strong organizational skills with the ability to manage tasks independently and meet deadlines with minimal oversight on daily routines.
• Excellent verbal and written skills; comfortable translating security concepts into clear documentation.
• Strong interpersonal skills with a track record of building positive relationships across non-technical teams (like Legal, HR, Finance) and technical teams (like IT and Engineering) to resolve security risks collaboratively.

Responsibilities

• Conduct third-party vendor risk assessments and internal risk evaluations; identify, document, and report on potential vulnerabilities and control gaps.
• Respond to standard vendor security questionnaires and support internal teams in answering security-related questions from prospects.
• Track and collect evidence for ongoing SOC 2 and ISO 27001 compliance audits.
• Proactively identify emerging threats and associated risks to existing business processes and corporate assets, and collaborate with senior team members to develop practical security solutions.
• Coordinate and deliver security awareness training programs to employees to foster a strong security culture.
• Assure compliance with outside regulations affecting the Company.
• Collect and maintain impactful security and compliance metrics for team dashboards.
• Partner with Legal, Engineering, IT, Finance, and HR to ensure corporate security policies are understood and followed.
• Identify operational inefficiencies and areas for improvement in existing security controls, and help design smoother workflows.

Skills

Vendor risk assessments

GRC

SOC 2

ISO 27001

Security frameworks

Security documentation

Cloud security

Stakeholder communication

Risk assessment

Education

Bachelor’s degree in information security/related field

Tools

AWS

Azure

GCP

Job description

Lucid Software, a leader in visual collaboration, seeks a Security Analyst to safeguard corporate assets and web applications. You will drive day-to-day GRC operations, vendor risk assessments, and support SOC 2 and ISO 27001 audits while helping maintain customer trust and regulatory compliance.

You will collaborate with Legal, Engineering, IT, Finance, and HR to implement effective security controls and metrics, fostering a proactive risk culture across the organization.