Internal Audit & Compliance Analyst, LucidLink
$130k
+ Bonus & Equity
Cloud-based video editing
Job no longer available
Cloud-based video editing
101-200 employees
Job no longer available
$130k
+ Bonus & Equity
101-200 employees
Company mission
To make data universally, securely, and seamlessly accessible to everyone, everywhere.
Role
Who you are
- This role is ideal for someone with experience in GRC tools, regulatory compliance, and cybersecurity frameworks
- 5 years of experience in GRC, IT audit, compliance, or cybersecurity risk management
- Preferred experience working with software/SaaS companies
- Familiarity with regulatory and industry compliance frameworks (SOC 2, ISO 27001, GDPR, CCPA/CPRA etc.)
- Experience working with GRC tools (e.g., OneTrust, LogicGate, Vanta, Drata, or similar)
- Understanding of privacy-enhancing technologies and secure software development principles
- Strong analytical, documentation, and problem-solving skills
- Ability to translate complex compliance requirements into actionable business processes and communicate these effectively to technical and non-technical stakeholders
- Detail-oriented with strong analytical and problem-solving skills
- Experience in completing security self-assessment questionnaires and working with auditors is a plus
- Certifications such as CISA, CRISC, or ISO 27001 Lead Implementer/Auditor are a plus but not required
What the job involves
- We are seeking a detail-oriented and proactive Internal Audit & Compliance Analyst to support our audit and compliance initiatives
- You will be responsible for conducting internal readiness assessments, documenting compliance gaps, tracking risk remediation efforts, and ensuring we meet regulatory and industry-specific requirements
- Conduct internal audits and readiness assessments for compliance frameworks such as SSAE16, SOC 2, ISO 27001, TPN, GDPR, and other relevant regulatory and market-specific requirements
- Ensure compliance with GDPR, CCPA/CPRA and other privacy regulations
- Identify compliance gaps, summarize risks, and track remediation efforts to closure
- Maintain and manage GRC tools to support compliance monitoring, reporting, and risk assessments
- Partner with internal teams to document and enhance security controls, policies, and procedures
- Complete security and compliance self-assessment questionnaires from customers and partners
- Collaborate with third-party auditors and assist in external audit engagements
- Stay up to date with evolving cybersecurity and risk management frameworks, such as NIST, CIS, ISO 27001, and others
- Support compliance with evolving regulations and AI governance frameworks
- Support third-party risk assessment processes and support vendor due diligence efforts
- Collaborate with engineering, legal and product teams to align compliance efforts with business needs
- Support the development and maintenance of compliance documentation, policies and training programs
- Support the development and execution of internal security awareness and compliance training
Application process
- Deadline to Apply: April 17, 2025 at 6:00 AM UTC
Our take
Remote working has become a pretty standard part of the fabric of modern-day work life. But how do you navigate remote working in professions - such as video editing - where people require computers capable of downloading huge files and softwares in order to do their job? That’s the issue LucidLink takes aim at, with its cloud-based file-sharing service.
Its platform is specifically designed to be able to share very large amounts of data over very long distances, immediately. This is what makes it suitable for cloud-based video editing services - a huge breakthrough for media and television which enables post-production to be possible remotely in a way that it fundamentally wasn’t before.
LucidLink has cornered a very clear gap in a huge market. With 2023 funding expected to help the company reach profitability, it already had swathes of high-profile customers. These include Netflix, MTV, Condé Nast, Spotify, JP Morgan and Vice, so it's set to make serious waves moving forward,
Steph
Company Specialist at Welcome to the Jungle
Insights
Company
Funding (last 2 of 5 rounds)
Nov 2023
$75m
SERIES C
May 2022
$20m
SERIES B
Total funding: $114.6m
Company benefits
- Stock option plan
- Additional vacation days based on your needs so you can maintain a healthy work-life balance
- Flexible working hours and work location
- Company-sponsored sport cards for you and one companion
- Fresh fruits and other snacks in the office at all times and a company-sponsored team lunch every Friday
- A full-coverage health care package that includes dental care and medical supplies
Company HQ
West Portal, San Francisco, CA
Leadership
George Dochev
(CTO)Previously Lead Software Engineer at ASE Engineering, before co-founding and serving as Director of Software Engineering at DataCore Software.
Peter Thompson
(CEO)Former Manager of Inabata & Company, President and Representative Director of DataCore Japan, and VP of Emerging & Developing Markets at DataCore Software.
Share this job