LastPass, the #1 password leader, provides password and identity management solutions that are convenient, easy to manage, and effortless to use, helping more than 32 million users and 100,000 businesses organize and protect their online lives. As a pioneer in cloud security technology, LastPass provides award-winning password and identity management solutions that are convenient, effortless, and easy to manage. LastPass values users’ privacy and security, so your sensitive information is always hidden – even from us.
We welcome new ideas, support your growth, and recognize your value, if this aligns with what you are looking for in your next career move, Join Us
LastPass is looking for an Associate GRC Analyst:
You will be apart of the LastPass Security and Privacy GRC Team. This position is pivotal for stakeholder engagement, decision support, and assurance activities across both product and enterprise functions. Our mission within the GRC team is to foster a unified environment that promotes effective and efficient risk management. This not only builds customer trust but also encourages innovation and seamlessly integrates governance into business workflows.
If you are passionate about complex problem solving and motivated by scale, then this is the role for you!
Who will you work with?
You will work with all areas of the organization in the context of processing security requests internally, such as policy exceptions and security reviews. You will work particularly close with areas such as IT and other security teams to ensure thorough reviews supported by other specialists in our security functions
What are some of the exciting challenges you will be working on?
- Optimizing and delivering on planned compliance activities to ensure we meet the requirements of our security certifications and internal LastPass control framework.
- Work directly with the business, and be an internal face and voice to the GRC team for daily work and be directly involved in helping us foster a security culture of collaboration and mutual support with our internal teams
What does it take to work at LastPass?
- Previous experience in a GRC function (e.g., Security Compliance, Finance, Procurement, Audit, Internal Audit, or Business Continuity).
- Demonstrated expertise in cybersecurity GRC functions and a solid understanding of cybersecurity frameworks (e.g., ISO 27001, SOC 2, NIST-CSF, NIST 800-53, CIS).
- Prior involvement in operating a certified or certifiable management system.
- Strong stakeholder engagement and communication skills, ensuring transparent and effective interactions.
- Excellent writing and documentation abilities, producing clear, concise, and thorough records.
- Capable of working autonomously with exceptional initiative, planning, and organizational skills to efficiently complete tasks.
- Detail-oriented and collaborative, promoting teamwork and meticulous attention to detail.
- Proficient with the Microsoft Office Suite (Outlook, Word, Excel).
- Fluent in English, meeting the language requirements for the services provided.
It's great, but not required:
Candidates are not required to hold certifications as a prerequisite for employment; however, we prefer the following certifications, noting that the list is not exhaustive.
- SEC+
- SSCP
- SC-900
- CISA
- CAP
- CCAK
- CRISC
Why LastPass?
- Market-leading password manager
- High-growth, collaborative environment with inclusive teams
- Remote first culture
- Competitive compensation
- Flexible Paid time off policies including but not limited to: Monthly self-care days (12 extra paid days off annually), volunteering days
- Generous Parental leave
- Comprehensive health coverage, dependents included
- Home office setup support
- LastPass families free account up to 5 members
- Continuous learning and development opportunities
Unlock your potential with us - your skills, experience, and unique perspective matter more than just checking the boxes. Apply today, and let's build the future together!
We’re building an inclusive community that reflects the people of all races, genders, sexual orientations, national origins, backgrounds, and perspectives who share our world.
For all US based jobs please review our Applicant Privacy Notice
For all EU based jobs please review our Candidate Privacy Notice
Please review our CCPA Notice
