GRC Analyst

Uplight

1d•$84,000 - $100,000•Hybrid

About The Position

Uplight is creating a new category of energy by developing software that manages energy resources in homes and businesses. This includes smart thermostats, electric vehicles, solar panels, storage batteries, heat pumps, and user behavior to generate, shift, or save energy. The goal is to balance the grid, making it more efficient and reliable, thereby creating clean energy capacity instead of relying on fossil fuels. Uplight's solutions aim to accelerate the transition to clean energy and reduce costs for energy consumers. The company is seeking a GRC Analyst to contribute to its mission and lead the clean energy revolution.

Requirements

1-3 years of experience in a GRC and/or security position
Experience of 3rd party/vendor risk management processes
Experience in working with the sales team to complete Requests for Proposals and security questionnaires
Understanding of GRC processes such as policy management, risk assessment, and IT audit
Exposure to public cloud and cloud security concepts in environments like AWS, Azure or GCP
Exceptional verbal and written communication skills

Nice To Haves

GRC or Privacy certifications (e.g. CISA, CIPP, etc)

Responsibilities

Manage 3rd party/vendor risk management assessments
Assist sales and operations functions by managing security and compliance-related tasks such as completing Request for Proposals and security questionnaires
Manage annual and ad-hoc tabletop testing
Review contracts from a security and privacy perspective
Represent security and privacy in external-facing conversations, such as suppliers and clients
Participate in GRC processes such as risk assessment, policy management, and audits
Participate in projects dedicated to improving Uplight’s governance, risk, compliance (GRC), privacy, and information security posture
Participate in security event monitoring and response
Participate in privacy operations practices to ensure Uplight meets its privacy obligations
Participate in security and compliance review activities
Participate in on-call shift rotation
Assist with security incident response activities, including developing playbooks, managing incident response processes, and continuous improvement practices
Other duties as assigned