SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Lucid Software, a Forbes Cloud 100 and Fortune Best Workplace in Technology company, is seeking a Security Analyst to join its security team in Raleigh, NC. This hybrid role focuses on protecting corporate assets, web applications, and employees through governance, risk, and compliance (GRC) operations.
You will execute day-to-day GRC operations including third-party vendor risk assessments, internal risk evaluations, and compliance audits. Key responsibilities include conducting vendor security questionnaires, tracking evidence for SOC 2 and ISO 27001 compliance, identifying emerging threats, and coordinating security awareness training programs. You'll work cross-functionally with Legal, Engineering, IT, Finance, and HR to ensure security policies are understood and implemented. The role also involves maintaining security metrics, identifying operational inefficiencies in existing controls, and designing improved workflows.
The ideal candidate holds a bachelor's degree in information security, business management, or related field with 3+ years of experience in third-party risk management, GRC, or customer due diligence. You should understand common security frameworks (NIST 800-53, ISO 27001, SOC 2) and possess strong organizational, verbal, and written communication skills. Excellent interpersonal abilities are essential for collaborating across technical and non-technical teams to resolve security risks.
Preferred qualifications include experience in modern SaaS or cloud-first environments, risk management certifications (CRISC, CISSP, CISA, Security+, CySA+), cloud platform knowledge (AWS, GCP, Azure), and experience with process improvement and GRC automation tools including AI-enabled workflows.
