GRC Analyst, Uplight

• 1-3 years of experience in a GRC and/or security position
• Experience in GRC processes such as policy management, risk assessment, and IT audit
• Experience with privacy practices such as data mapping and privacy risk assessment
• Understanding of 3rd party/vendor risk management processes
• Exposure to public cloud and cloud security concepts in environments like AWS, Azure or GCP
• Exceptional verbal and written communication skills

Desirable

• We are looking for a GRC Analyst to drive our company forward, and help us lead the clean energy revolution!
• Participate in projects dedicated to improving Uplight’s governance, risk, compliance (GRC), privacy, and information security posture
• Manage GRC processes such as risk assessment, policy management, and audits
• Assist with security incident response activities including developing playbooks, managing incident response processes, and continuous improvement practices
• Assist in 3rd party/vendor risk management assessments
• Participate in privacy operations practices to ensure Uplight meets its privacy obligations
• Assist sales and operations functions with security and compliance related tasks such as completing security questionnaires
• Participate in security and compliance review activities
• Participate in on-call shift rotation

• Application Deadline: March 5, 2025