LastPass is looking for an Associate GRC Analyst:You will be apart of the LastPass Security and Privacy GRC Team. This position is pivotal for stakeholder engagement, decision support, and assurance activities across both product and enterprise functions. Our mission within the GRC team is to foster a unified environment that promotes effective and efficient risk management. This not only builds customer trust but also encourages innovation and seamlessly integrates governance into business workflows.If you are passionate about complex problem solving and motivated by scale, then this is the role for you!Who will you work with?You will work with all areas of the organization in the context of processing security requests internally, such as policy exceptions and security reviews. You will work particularly close with areas such as IT and other security teams to ensure thorough reviews supported by other specialists in our security functionsWhat are some of the exciting challenges you will be working on?Optimizing and delivering on planned compliance activities to ensure we meet the requirements of our security certifications and internal LastPass control framework.Work directly with the business, and be an internal face and voice to the GRC team for daily work and be directly involved in helping us foster a security culture of collaboration and mutual support with our internal teamsWhat does it take to work at LastPass?Previous experience in a GRC function (e.G., Security Compliance, Finance, Procurement, Audit, Internal Audit, or Business Continuity).Demonstrated expertise in cybersecurity GRC functions and a solid understanding of cybersecurity frameworks (e.G., ISO 27001, SOC 2, NIST-CSF, NIST 800-53, CIS).Prior involvement in operating a certified or certifiable management system.Strong stakeholder engagement and communication skills, ensuring transparent and effective interactions.Excellent writing and documentation abilities, producing clear, concise, and thorough records.Capable of working autonomously with exceptional initiative, planning, and organizational skills to efficiently complete tasks.Detail-oriented and collaborative, promoting teamwork and meticulous attention to detail.Proficient with the Microsoft Office Suite (Outlook, Word, Excel).Fluent in English, meeting the language requirements for the services provided.It's great, but not required: Candidates are not required to hold certifications as a prerequisite for employment; however, we prefer the following certifications, noting that the list is not exhaustive.SEC+SSCPSC-900CISACAPCCAKCRISC#J-18808-Ljbffr
