|
Описание: |
About us
Farsight Vision converts flight footage into digital 2D and 3D twins for real-time intelligence in GNSS-denied environment, making analytics and situational awareness convenient and accessible while saving time and effort. We create multi-layered digital twins of terrain with dynamic tracking and object/landscape monitoring and predicting.
We are looking for a Compliance Officer (Cybersecurity) who will own and lead all security, compliance, and certification processes across the company. This is a high-impact, technical role responsible for ensuring our product, infrastructure, and internal operations meet leading global cybersecurity, defense, and quality standards.
The ideal candidate understands the full lifecycle of compliance from policy creation to implementation and audits and can collaborate closely with engineering, product, and leadership to build a secure, resilient environment.
Responsibilities
* Lead, manage, and continuously improve all company security and compliance initiatives, including ISO 27001/27017, SOC 2, NIST, and other relevant industry or defense certifications.
* Develop, implement, and maintain cybersecurity policies, procedures, and internal controls aligned with regulatory and industry requirements.
* Own the full certification cycles: readiness assessments, gap analysis, remediation planning, documentation, audit coordination, and ongoing surveillance activities.
* Collaborate with Engineering and Product teams to ensure secure architecture, data handling, and operational practices meet compliance standards.
* Conduct internal security audits, risk assessments, and vulnerability reviews; ensure timely mitigation and documentation of findings.
* Manage vendor security reviews, access control governance, and compliance requirements across the supply chain.
* Monitor regulatory changes and emerging cybersecurity standards; drive necessary updates and ensure continuous readiness.
* Act as the primary point of contact for external auditors, partners, and clients on all compliance-related topics.
Requirements
* 4+ years of experience in cybersecurity, compliance, information security, or related technical roles.
* Strong hands-on understanding of security standards such as ISO 27001, SOC 2, NIST, CMMC, or other defense-related frameworks.
* Experience leading certification or audit processes end-to-end.
* Solid technical knowledge of cloud security, network security, identity/access management, data protection, and secure development practices.
* Ability to build and document policies, procedures, diagrams, and evidence required for audits.
* Strong project management skills with the ability to coordinate cross-functional teams and drive complex initiatives.
* Excellent communication skills and comfort working directly with external auditors and regulatory bodies.
* High integrity, attention to detail, and ability to operate in a fast-paced environment with elevated security requirements.
Nice to have
* Experience in defense, aerospace, dual-use technology, or other high-security industries.
* Relevant certifications (e.g., CISSP, CISM, ISO 27001 Lead Implementer/Lead Auditor, Security+).
* Background in software engineering, DevSecOps, or IT security operations.
* Experience with GDPR, export control, or government compliance frameworks.
Why us
* Impactful projects. Your work will strengthen the country’s defense capability and support the Ukrainian Armed Forces; your results will directly help our defenders;
* Professional team and startup dynamics. You will become part of a team of professionals who develop cutting‑edge technologies and value teamwork. Our culture encourages knowledge exchange, innovation and rapid growth.
* Flexible conditions. Remote work, flexible schedule, paid vacation and sick leave.
Відгукнутись на вакансію |
