Director, Security and Compliance
Twistbioscience · USA - South San Francisco, CA
About this role
**Director, Security and Compliance** **Job Overview** The Director of Security and Compliance is a strategic, highly technical leader responsible for designing, scaling, and overseeing global information security and regulatory compliance programs. Reporting to the CIO, this role bridges technical security engineering, legal requirements, and business operations—defining security posture, leading Governance, Risk, and Compliance (GRC) initiatives, and ensuring continuous alignment with industry frameworks. The ideal candidate translates complex regulatory policies into practical, testable technical controls so engineering and business teams can move fast without losing control. --- **Core Responsibilities** 1) **Governance, Risk & Compliance (GRC) Strategy** - **Framework Management:** Lead strategy, implementation, and continuous monitoring of security frameworks (e.g., SOC 2, ISO 27001, NIST CSF, PCI DSS, HIPAA). - **Data Privacy Adherence:** Partner with Legal to ensure compliance with global data privacy regulations (e.g., GDPR, CCPA/CPRA). - **Risk Management:** Run regular enterprise risk assessments; identify vulnerabilities, prioritize risks by business impact, and collaborate on remediation plans. - **Policy Architecture:** Draft, update, and enforce company-wide information security policies and procedures that adapt to evolving engineering workflows (e.g., CI/CD, infrastructure-as-code). 2) **Security Operations & Oversight** - **Security Posture Optimization:** Partner with IT Infrastructure to monitor infrastructure security, access controls (IAM), and data encryption protocols. - **Incident Response:** Lead on the Incident Response Team—support investigations, mitigation, and required regulatory disclosures in the event of a breach. - **Third-Party Risk Management (TPRM):** Oversee security vetting for vendors, software tools, and supply chain partners to minimize external risk. 3) **Audit & Stakeholder Management** - **Audit Readiness:** Manage external and internal security audits; coordinate evidence collection; manage auditor relationships; reduce duplicate controls across overlapping frameworks. - **Customer & Sales Enablement:** Represent the company’s security posture for enterprise clients—review security questionnaires, participate in prospective client calls, and help build trust to accelerate sales. - **Executive Reporting:** Translate complex technical information into concise business metrics for executive leadership and the Board. 4) **Leadership & Culture** - **Team Development:** Recruit, mentor, and manage security analysts and compliance professionals. - **Security Training:** Develop and deliver modern security awareness training to build a culture of vigilance across business units. --- **Required Qualifications & Experience** - **Education:** BS/MS in Computer Science, Information Systems, Cybersecurity, Business, or equivalent practical experience. - **Experience:** 10+ years in information security, risk management, or compliance; at least 5 years in a leadership/managerial capacity. - **Cloud & Tech Savvy:** Strong familiarity with AWS (or similar cloud environments) and modern compliance automation platforms (e.g., Vanta, Drata, Anecdotes). - **Framework Fluency:** Proven experience achieving and maintaining certifications such as SOC 2 Type II or ISO 27001 from the ground up. - **Certifications (preferred):** CISSP, CISM, CISA, CRISC, or CIPP (one or more). - **Communication Style:** Exc
Listing freshness
CronJobs last confirmed this listing 1h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.