GRC Lead

Description:

Every nation has data. Few can protect it. Fewer still can act on it.

Dream is the sovereign AI and national cyber-defense company for governments.

We help nations secure their most critical systems, connect fragmented information at a national scale, and turn their most sensitive data into decisions, all fully sovereign.

This is more than a job. It's a Dream job, where you'll work at a global scale alongside some of the best AI researchers, cyber operators, and government experts in the world.

The mission only works if the company behind it does. This role keeps Dream running at the scale our work demands. And our work demands a uniquely global scale.

We are looking for a GRC Lead to establish, implement, and maintain a cross-organizational GRC program that supports the organization's growth and security objectives. This role will work closely with IT, Security, Legal, HR, and business stakeholders to develop and enforce governance processes, manage security and business risks, support compliance initiatives, and build a scalable security framework that enables business growth.

• Develop and maintain the organization's information security governance framework, including policies, standards, and procedures.
• Establish and manage the enterprise security risk management process and maintain the corporate risk register.
• Lead compliance initiatives and support external certifications and regulatory requirements.
• Coordinate internal and external audits, including evidence collection, control reviews, and remediation tracking.
• Develop and manage third-party/vendor risk assessment processes.
• Monitor compliance with internal policies and security standards.
• Support security awareness and policy communication across the organization.
• Track security findings and remediation activities, providing regular reporting to management.
• Partner with IT and Security teams to ensure governance processes align with operational realities and business objectives.