Security & Compliance Manager

About the role

We’re hiring a hands‑on Security & Compliance Lead to build and scale Phylo’s security, privacy, and compliance program. You’ll own the compliance roadmap, lead audits and customer reviews, and partner with engineering to turn regulatory requirements into practical controls.

Key responsibilities

• Own Phylo’s security and compliance roadmap.
• Lead SOC 2, ISO 27001 and GDPR readiness, audits, evidence collection and remediation.
• Build HIPAA‑ready processes for workloads handling protected health information.
• Assess and plan for FedRAMP, NIST, privacy and life‑sciences requirements.
• Partner with engineers to implement scalable controls across cloud infrastructure, applications and AI systems.
• Lead customer questionnaires, RFPs, due‑diligence and security conversations.
• Run risk assessments and drive remediation across systems, vendors and processes.
• Maintain lightweight policies, customer‑facing security documentation and compliance reporting.
• Automate evidence collection, monitoring and other compliance workflows.

Required profile

• 5+ years in security GRC, compliance or a security‑engineering‑adjacent role.
• Experience leading SOC 2, ISO 27001, HIPAA, FedRAMP or similar programs.
• Strong understanding of cloud and application security.
• Ability to translate regulatory requirements into technical controls.
• Experience supporting audits and enterprise customer security reviews.
• Strong cross‑functional communication and program ownership.
• Pragmatic, hands‑on approach suited to an early‑stage company.

What we offer

• Competitive salary and equity.
• Full medical, dental and vision coverage, free therapy sessions and eyewear stipend.
• 401(k) plan (US only) and unlimited PTO (US only).
• Lunch and snacks on‑site, regular team offsites and company events.
• Culture of excellence and speed, with direct impact on biomedical discovery.