Job Description

We're Cruise, a self-driving service designed for the cities we love.

We’re building the world’s most advanced, self-driving vehicles to safely connect people to the places, things, and experiences they care about. We believe self-driving vehicles will help save lives, reshape cities, give back time in transit, and restore freedom of movement for many.

Cruisers have the opportunity to grow and develop while learning from leaders at the forefront of their fields. With a culture of internal mobility, there's an opportunity to thrive in a variety of disciplines. This is a place for dreamers and doers to succeed.

If you are looking to play a part in making a positive impact in the world by advancing the revolutionary work of self-driving cars, join us.

About the Role:

Cruise is looking for a Security Risk & Compliance Specialist to help Cruise build trust with regulators, investors, internal Cruise teams, and customers. In this position, you will own and improve Cruise’s Information Security Management System (ISMS) and play a leading role to prepare Cruise for assessments against ISO 27001/2, NIST 800-171, and others. You will use a security first approach to risk and compliance to enable our Security team and secure Cruise. If you're interested in driving security initiatives by engaging process owners in the design, documentation, implementation, and monitoring of security controls, and demonstrating those controls to external auditors.

What you’ll be doing

• Work directly with process owners across Security, IT, product, HR, Finance, and Legal to design, implement, and remediate security controls
• Responsible for testing the effectiveness of Security controls and represent the control to auditors, as needed
• Own and manage the content of Cruise’s Security policies and standards

What you must have:

• 2+ years of experience auditing or implementing CIS Critical Security Controls, ISO 27001, SOC2, NIST 800-171, or similar cybersecurity standards
• Experience managing cybersecurity compliance in a cloud environment such as AWS or GCP
• Broad understanding of security fundamentals and their application including network security, software development lifecycle, identity and access management, vulnerability management, and incident detection and response.
• Intellectual curiosity and integrity, and a strong passion to create lasting solutions to solve key business problems

Bonus Points!

• Experience at a Big 4 firm
• CISA, CSSP, CRISC, CISM, or similar certification
• Bachelor’s degree in computer science, computer engineering, information systems, or business technology

Why Cruise?

• Our benefits are here to support the whole you:
  • Competitive salary and benefits
  • 401(k) Cruise matching program
  • Medical / dental / vision, AD+D and Life
  • One Medical membership
  • Flexible vacation and company paid holidays
  • Healthy meals and snacks provided for non-remote employees
  • Paid parental leave
  • Fertility Benefits
  • Dependent Care Flexible Spending Account, subsidized by Cruise
  • Flexible Spending Account
  • Monthly wellness stipend
  • Pre-tax Commuter Benefit Plan for non-remote employees
• We’re Integrated
  • Through our partnerships with General Motors and Honda, we are the only self-driving company with fully integrated manufacturing at scale.
• We’re Funded
  • GM, Honda, Microsoft, SoftBank, & T. Rowe Price, have invested billions in Cruise. Their backing for our technology demonstrates their confidence in our progress, team, and vision and makes us one of the leading autonomous vehicle organizations in the industry. Our deep resources greatly accelerate our operating speed.
• We’re Independent
  • We have our own governance, board of directors, equity, and investors. Our independence allows us to not just work on the edge of technology, but also define it.
• We’re Vested
  • You won’t just own your work here, you’ll have the potential to own equity in Cruise, too. We are competing in a market that is projected to grow exponentially, which gives our company valuation room to grow.

Cruise LLC is an equal opportunity employer. We strive to create a supportive and inclusive workplace where contributions are valued and celebrated, and our employees thrive by being themselves and are inspired to do the best work of their lives.

We seek applicants of all backgrounds and identities, across race, color, ethnicity, national origin or ancestry, citizenship, religion, sex, sexual orientation, gender identity or expression, veteran status, marital status, pregnancy or parental status, or disability. Applicants will not be discriminated against based on these or other protected categories or social identities. Cruise will consider for employment qualified applicants with arrest and conviction records, in accordance with applicable laws.

Cruise is committed to the full inclusion of all applicants. If reasonable accommodation is needed to participate in the job application or interview process please let our recruiting team know or email [email protected].

We proactively work to design hiring processes that promote equity and inclusion while mitigating bias. To help us track the effectiveness and inclusivity of our recruiting efforts, please consider answering the following demographic questions. Answering these questions is entirely voluntary. Your answers to these questions will not be shared with the hiring decision makers and will not impact the hiring decision in any way. Instead, Cruise will use this information not only to comply with any government reporting obligations but also to track our progress toward meeting our diversity, equity, inclusion, and belonging objectives.

Note to Recruitment Agencies: Cruise does not accept unsolicited agency resumes. Furthermore, Cruise does not pay placement fees for candidates submitted by any agency other than its approved partners.