GRC Analyst, Uplight

• We hire on value alignment first. The ideal candidate is someone who has a demonstrated passion for security and for leaving the world better than they found it. If you feel you’d be a good fit with us, consider applying
• 1-3 years of experience in a GRC and/or security position
• Experience of 3rd party/vendor risk management processes
• Experience in working with the sales team to complete Requests for Proposals and security questionnaires
• Understanding of GRC processes such as policy management, risk assessment, and IT audit
• Exposure to public cloud and cloud security concepts in environments like AWS, Azure or GCP
• Exceptional verbal and written communication skills

Desirable

• We are looking for a GRC Analyst to drive our company forward, and help us lead the clean energy revolution!
• Manage 3rd party/vendor risk management assessments
• Assist sales and operations functions by managing security and compliance-related tasks such as completing Request for Proposals and security questionnaires
• Manage annual and ad-hoc tabletop testing
• Represent security and privacy in external-facing conversations, such as suppliers and clients
• Participate in GRC processes such as risk assessment, policy management, and audits
• Participate in projects dedicated to improving Uplight’s governance, risk, compliance (GRC), privacy, and information security posture
• Participate in security event monitoring and response
• Participate in privacy operations practices to ensure Uplight meets its privacy obligations
• Participate in security and compliance review activities
• Participate in on-call shift rotation
• Assist with security incident response activities, including developing playbooks, managing incident response processes, and continuous improvement practices
• Other duties as assigned