Cybersecurity Governance, Risk, and Compliance Lead, Saronic
Offers equity & performance-based bonuses
Unmanned vehicles for maritime security
Open for applications
Unmanned vehicles for maritime security
21-100 employees
Open for applications
Offers equity & performance-based bonuses
21-100 employees
Company mission
To redefine maritime superiority.
Role
Who you are
- Bachelor's degree in IT, Security or equivalent experience
- 5+ years experience in Cybersecurity GRC, preferably in the technology or defense industry
- Strong time management skills, with the ability to multitask and meet tight deadlines
- Excellent communication and interpersonal skills, including experience engaging with executive leadership
- Attention to detail and a commitment to quality
- Proficiency in Cybersecurity GRC software and tools
What the job involves
- Saronic is seeking a talented and organized Cybersecurity Governance, Risk, and Compliance (GRC) Lead, this role is responsible for developing and managing the cybersecurity governance, risk, and compliance program
- This role ensures the organization adheres to internal policies, regulatory requirements, and industry standards
- The GRC Lead will work closely with various teams to assess risks, monitor compliance, and implement governance frameworks to enhance the company’s overall cybersecurity posture
- As the GRC Lead for Security, you will play a critical role in protecting Saronic from and mitigating risks to our groundbreaking autonomous surface vessel technology
- Develop, implement, and maintain cybersecurity policies, procedures, and standards that align with industry best practices and regulatory requirements
- Establish and maintain cybersecurity governance frameworks to ensure accountability and effective oversight across the organization
- Collaborate with key stakeholders, including IT, legal, and business leaders, to ensure policies are communicated and enforced organization wide
- Lead the cybersecurity risk management program by identifying, assessing, and prioritizing risks to the organization’s assets and operations
- Perform risk assessments to evaluate the organization’s risk exposure, including potential vulnerabilities, threats, and the impact of non-compliance with security regulations
- Develop risk mitigation strategies and recommend controls to reduce or eliminate cybersecurity risks
- Ensure compliance with regulatory requirements such as NIST 800-171, NIST 800-53, CMMC, ISO 27001, ITAR, EAR, GDPR, and other applicable frameworks
- Monitor and manage internal and external cybersecurity audits, ensuring that the organization addresses audit findings and implements corrective actions
- Track changes in relevant laws, regulations, and industry standards to ensure the organization’s cybersecurity posture remains compliant
- Lead and coordinate internal and external audits, including readiness assessments, vulnerability assessments, and certification processes
- Work closely with external auditors and consultants to ensure successful audit outcomes and remediate any findings or gaps identified
- Regularly assess the effectiveness of security controls and make recommendations for improvements
- Collaborate with the incident response team to ensure that governance and compliance aspects are integrated into the response process
- Ensure that all cybersecurity incidents are reported accurately and in compliance with regulatory requirements
- Assist in root cause analysis of incidents and ensure proper documentation and follow-up actions are completed
- Develop and manage cybersecurity awareness programs to educate employees on the importance of GRC and their role in maintaining compliance
- Conduct regular training sessions on cybersecurity policies, data protection regulations, and risk management best practices
- Ensure that leadership and relevant teams are educated on regulatory requirements and the organization’s risk posture
- Manage the cybersecurity aspects of the third-party risk management program, ensuring that vendors and partners comply with the organization’s security and privacy standards
- Conduct security assessments of third-party vendors and partners to identify and mitigate potential risks to the organization
- Review contracts and security agreements to ensure third-party compliance with relevant cybersecurity regulations
- Develop and track key performance indicators (KPIs) and metrics related to cybersecurity governance, risk, and compliance
- Provide regular reports to senior leadership on the organization’s risk posture, compliance status, and any emerging threats
- Present audit findings, compliance gaps, and risk management updates to stakeholders in a clear and actionable format
- Work closely with IT, legal, HR, and other business units to align cybersecurity initiatives with broader organizational goals
- Collaborate with external regulatory bodies and industry partners to stay informed of emerging trends and requirements in cybersecurity GRC
- Act as a subject matter expert (SME) for cybersecurity governance, risk management, and compliance across the organization
Our take
Unmanned surface vehicles (USVs) are vehicles which operate at the surface of the water without a crew and can be used in oceanography and environmental monitoring, as well as for cargo transport or military applications. Saronic is a company developing USVs to have enhanced awareness and improved survivability, to be employed in maritime security.
Saronic's vehicles are designed to be smarter than previous models, with capabilities including adaptive path planning, multichannel communication, and the ability to better identify and track targets through a combination of passive sensors and advanced algorithms. The company has raised significant funding that will be used to accelerate R&D as it expands manufacturing capacity in anticipation of demand for rapid production in the future.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
Few candidates hear
back within 2 weeks
Company
Funding (2 rounds)
Jul 2024
$175m
SERIES B
Oct 2023
$55m
SERIES A
Total funding: $230m
Company HQ
South Manchaca, Austin, TX
Articles
Leadership
Dino Mavrookas
(Co-Founder & CEO)Board Member of the Navy SEAL Foundation, and former Entrepreneur In Residence at 8VC. Spent 11 years as a Chief Petty Officer in the US Navy, from 2004 to 2015.
Rob Lehman
(Co-Founder & CCO)Founder of 9 Line Solutions, who is also a Communications Officer in the US Marine Corps. Previously the Chair and CEO of Temeku Technologies.
Vibhav Altekar
(Co-Founder)Former Advisor and Angel Investor for Standard Metrics and Chef Robotics. Spent 4 years working in Machine Learning at Anduril Industries.
Doug Lambert
(Co-Founder)Former VP of Engineering at Terradepth. Before that, worked at Liquid Robotics for a total 8 years, ultimately as Head of Engineering.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 25 more jobs at Saronic