Corporate Assurance Lead

Anduril Industries is a defense technology company with a mission to transform U.S. and allied military capabilities with advanced technology. By bringing the expertise, technology, and business model of the 21st century’s most innovative companies to the defense industry, Anduril is changing how military systems are designed, built and sold. Anduril’s family of systems is powered by Lattice OS, an AI-powered operating system that turns thousands of data streams into a realtime, 3D command and control center. As the world enters an era of strategic competition, Anduril is committed to bringing cutting-edge autonomy, AI, computer vision, sensor fusion, and networking technology to the military in months, not years.

Anduril employs a variety of network security tooling and complies with a variety of national and international compliance frameworks to support global operations. The Corporate Assurance Lead is in charge of directly supporting Anduril's ability to collaborate with national and international stakeholders to bring Anduril's products into the environments that need Anduril's products. Corporate Assurance Leads are experienced professionals with a passion for collaborating with technical experts to outline network security implementation controls. Well versed in Information Technology, 800-171, ISO 27001, and other industry standard frameworks, the Corporate Assurance Lead is the driving force of Anduril's network presence around the globe. Forward thinkers capable of managing large projects as well as critical thinking skills outlining how security implementation that matters translates to a plethora of compliance frameworks. 

WHAT YOU’LL DO 

• Provide expertise on National and International compliance framework documentation in support of Anduril's corporate network
• Serve as the driving force behind Anduril's corporate network expansions and ability to perform Federal contracts
• Take technology standards from the commercial industry and coordinate with internal infrastructure engineering teams to implement advanced security tooling
• Creating, maintaining, communicating, and enforcing information security standards
• Ensure periodic reviews of standards, policies and procedures created are performed
• Communicates risk findings and recommendations that are clear and actionable to all stakeholders
• Assess and report on the risks and benefits for the business as well as mandates for supplier compliance
• Maintains register of relevant suppliers/vendors, controls, and risks for ongoing vendor risk management activities
• Own the design, implementation coordination, documentation, assessment, and monitoring of internal control framework
• Define, document, and follow standards and best practices that would impact the organization as a whole and enhance the operational environment of Anduril across multiple programs
• Develops and maintains Plan of Action and Milestones (POA&M) to mitigate system vulnerabilities, address customer concerns, and monitor the life cycle of their respective network environments

REQUIRED QUALIFICATIONS

• Experience achieving and maintaining certifications and compliance with security frameworks such as ISO 27001, Cyber Essentials, NIST SP 800-171/CMMC, FedRAMP or others.
• Bachelor's degree in Information Security, Information Technology, Computer Science or other related technology degree. 
• Industry certifications like ISACA CISA, ISACA CISM, (ISC)2 CISSP, or equivalent industry experience can also satisfy the education requirement.
• Intermediate to advanced experience with computers, networks, firewalls, switches, encryption and authentication methods. Proficient, or able to gain proficiency with, a broad array of GRC applications and tools. 
• Six or more years of professional experience in Information Security or Information Technology.
• Must be eligible to obtain and maintain a U.S. TS clearance.

US Salary Range$150,000—$225,000 USD

 

The salary range for this role is an estimate based on a wide range of compensation factors, inclusive of base salary only. Actual salary offer may vary based on (but not limited to) work experience, education and/or training, critical skills, and/or business considerations. Highly competitive equity grants are included in the majority of full time offers; and are considered part of Anduril's total compensation package. Additionally, Anduril offers top-tier benefits for full-time employees, including:

• Platinum Healthcare Benefits: For U.S. roles, we offer top tier platinum coverage (medical, dental, vision) that are 100% covered by Anduril for you and 90% covered for your dependents.
  • For UK roles, Private Medical Insurance (PMI): Anduril will cover the full cost of the insurance premium