Security Analyst

Lucid Software is the leader in visual collaboration and work acceleration, helping teams see and build the future by turning ideas into reality. As a security analyst at Lucid, you will be responsible for protecting corporate assets, including web applications and employees, while fostering an environment of innovation and compliance.

What you'll do:

• Identify and report on possible security risks identified from third party vendor assessments, vulnerability scans, and internal risk discussions
• Proactively identify threats and associated risks to existing processes and assets and help develop solutions
• Assist with developing, maintaining, and coordinating security and compliance policies and training
• Assure compliance to outside regulations affecting the Company
• Assist in answering questions from both internal and external customers regarding the company’s security program and practices
• Manage the collection of impactful security metrics
• Work with other teams such as Legal, Engineering, IT, Finance, and HR to identify potential threats to critical business assets
• Identify opportunities for efficiencies, as well as for improvements in security controls while leading the design and implementation of related improvements

What they're looking for:

• Bachelor's degree in information security assurance, business management, or a related field
• 1+ years experience with third party risk management, GRC, customer due diligence, etc
• Understanding of common security frameworks and principles (e.g. NIST 800-53, ISO 27001, SOC 2, etc)
• Security-related Certification(s): E.g., SSCP, CC, Security+, CySA+, etc
• Ability to manage tasks independently to meet deadlines
• Excellent verbal and written skills including technical writing and great attention to details
• Able to work effectively across several different internal teams
• Considerable knowledge of and skill in applying risk management principles and practices
• One or more preferred Certification(s): CRISC, CISSP, CISA
• Understanding of the basics around common cloud computing solutions (e.g. AWS, GCP, Azure, etc)
• Recent experience in information system security risk management
• Can thrive working in a fast-paced, start-up-like environment

Benefits:

• Lucid is a hybrid workplace, allowing employees to work remotely, from one of our offices, or a combination of the two depending on the needs of the role and team