GRC-Analyst (m/w/d)

Job Description

Uplight is creating a new category of energy. We make software that manages energy resources in homes and businesses-including things like smart thermostats, electric vehicles, solar panels, storage batteries, heat pumps, and even people's behavior-to generate, shift, or save energy to balance the grid, making it more efficient and reliable. This creates clean energy capacity that can be used by the power grid instead of burning more fossil fuels. Our solutions accelerate the transition to clean energy and save money for energy customers.

We are looking for a GRC Analyst to drive our company forward, and help us lead the clean energy revolution!

How you will make an impact

• Manage 3rd party/vendor risk management assessments
• Assist sales and operations functions by managing security and compliance-related tasks such as completing Request for Proposals and security questionnaires
• Manage annual and ad-hoc tabletop testing
• Review contracts from a security and privacy perspective
• Represent security and privacy in external-facing conversations, such as suppliers and clients
• Participate in GRC processes such as risk assessment, policy management, and audits
• Participate in projects dedicated to improving Uplight's governance, risk, compliance (GRC), privacy, and information security posture
• Participate in security event monitoring and response
• Participate in privacy operations practices to ensure Uplight meets its privacy obligations
• Participate in security and compliance review activities
• Participate in on-call shift rotation
• Assist with security incident response activities, including developing playbooks, managing incident response processes, and continuous improvement practices
• Other duties as assigned

We hire on value alignment first. The ideal candidate is someone who has a demonstrated passion for security and for leaving the world better than they found it. If you feel you'd be a good fit with us, consider applying.

What you bring to Uplight

• 1-3 years of experience in a GRC and/or security position
• Experience of 3rd party/vendor risk management processes
• Experience in working with the sales team to complete Requests for Proposals and security questionnaires
• Understanding of GRC processes such as policy management, risk assessment, and IT audit
• Exposure to public cloud and cloud security concepts in environments like AWS, Azure or GCP
• Exceptional verbal and written communication skills

Bonus Points

• GRC or Privacy certifications (e.g. CISA, CIPP, etc)

Why Join Uplight in Leading the Fight Against Climate Change?

At Uplight, we're not just offering a job - we're offering a chance to be part of the solution to one of the world's biggest challenges. As a certified B Corporation, we're deeply committed to both social and environmental responsibility. Here's why you should join our team of passionate Uplighters:

• Make a Meaningful Impact: Your work directly impacts our mission of decarbonization and building a more sustainable future.
• Grow Your Career: We offer ample advancement opportunities, robust learning and development programs, and a supportive team environment that fosters collaboration and innovation.
• Thrive: We offer comprehensive benefits, including flexible time off, generous parental leave, a wellness stipend, and work flexibility to help you thrive both personally and professionally.
• Belong to an Inclusive Community: We celebrate diversity and foster an inclusive workplace where everyone feels respected, empowered, and heard. Our Employee Resource Groups offer opportunities to connect with colleagues who share your interests and backgrounds.
• Be Part of a Growing Movement: Join a team of dedicated individuals who are passionate about creating a more sustainable future. We offer a collaborative environment where your ideas are valued and your contributions recognized. Together, we can build a brighter tomorrow.

To learn more about our comprehensive benefits package and other perks, visit uplight.com/careers

Salary Range: $84,000 to $100,000 + Bonus

In accordance with the Colorado Equal Pay for Equal Work Act, the approximate annual base compensation range is listed above. The actual offer, reflecting the total compensation package and benefits, will be determined by a number of factors including the applicant's experience, knowledge, skills, and abilities, as well as internal equity among our team.

Uplight provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race (including hair texture and hairstyles), color, religion (including head coverings), age, sex, national origin, disability status (including neurodivergence), genetics, protected veteran status, sexual orientation, gender identity or expression, neurotypicality, or any other characteristic protected by federal, state or local laws.