Lead the security and compliance program at Phylo, ensuring readiness for various standards and collaborating with engineering teams.
Posted by employer 1 month ago
First seen on Joblaze 1 week ago
Last verified on the company career page 1 day ago
AI in the day-to-day
null
Requirements
- Experience
- 5+ years
Not disclosed in this posting: compensation, work arrangement, visa sponsorship.
Benefits
Joblaze summary
The Security & Compliance Manager at Phylo is responsible for developing and implementing the company's security and compliance framework, focusing on standards like SOC 2 and ISO 27001. This role requires expertise in cloud security and the ability to translate regulatory requirements into actionable controls, making it ideal for candidates with over five years of experience in security governance or compliance. The position suits individuals who thrive in fast-paced, early-stage environments and have a background in healthcare or life sciences.
Joblaze insights
- Listed 9 days ago on Joblaze — tracked directly from Phylo's career page.
- Phylo has 9 other open roles including Member of Technical Staff - Agent Engineer, Member of Technical Staff - Forward Deployed Scientist, Recruiter.
- 1672 active AI roles on Joblaze right now.
- 100 active SOC 2 roles on Joblaze right now.
- 88 active ISO 27001 roles on Joblaze right now.
- Typical AI salary we track runs $120,000–$199,775 (median $159,900, across 686 roles). See AI salary trends
Quick facts
- How much experience is required?
- At least 5 years of relevant experience for this Security & Compliance Manager role.
- What's the tech stack?
- Joblaze extracted these technologies from the posting: AI, FedRAMP, GDPR, HIPAA, ISO 27001, NIST.
- What seniority level is this role?
- Phylo targets lead candidates for this position.
- Is this full-time or contract?
- Full-time for this Security & Compliance Manager role at Phylo.
From the original posting
About Phylo
Phylo is an applied research lab building agentic intelligence to accelerate discovery for every biomedical scientist. We believe AI agents will fundamentally transform how biomedical research is done. Our fast-growing team brings together researchers and engineers across AI and biology, commercializing the Biomni platform.
Our growing team brings together world class researchers and engineers across AI and biology. Backed by a $13.5M seed round led by a16z, Menlo Ventures and Anthropic, and advised by Nobel Prize laureate and pioneering biologists, Phylo is building the next generation of AI systems for the life sciences.
About the Role
We’re hiring a hands-on Security & Compliance Lead to build and scale Phylo’s security, privacy, and compliance program. You’ll own our compliance roadmap, lead audits and customer reviews, and work closely with engineering to turn requirements into practical controls.
What you’ll do as a Security & Compliance Manager at Phylo:
Own Phylo’s security and compliance roadmap.
Lead SOC 2, ISO 27001 and GDPR readiness, audits, evidence collection, and remediation.
Build HIPAA-ready processes for workloads involving protected health information.
Assess and plan for FedRAMP, NIST, privacy, and life-sciences requirements where applicable.
Partner with engineers to implement scalable controls across cloud infrastructure, applications, and AI systems.
Lead customer questionnaires, RFPs, due diligence, and security conversations.
Run risk assessments and drive remediation across systems, vendors, and processes.
Maintain lightweight policies, customer-facing security documentation, and compliance reporting.
Automate evidence collection, monitoring, and other compliance workflows.
What We're Looking For:
5+ years in security GRC, compliance, or a security engineering-adjacent role.
Experience leading SOC 2, ISO 27001, HIPAA, FedRAMP, or similar programs.
Strong understanding of cloud and application security.
Ability to translate regulatory requirements into technical controls.
Experience supporting audits and enterprise customer security reviews.
Strong cross-functional communication and program ownership.
A pragmatic, hands-on approach suited to an early-stage company.
Nice to Haves:
Experience building a security program from an early stage.
Background in healthcare, life sciences, enterprise AI, or cloud infrastructure.
Experience with HIPAA, FedRAMP, NIST SP 800-53, HITRUST, or GDPR.
Familiarity with AI governance frameworks such as NIST AI RMF or ISO 42001.
Experience automating GRC and compliance workflows.
Why Join Us?
Competitive salary and equity share in building the future of biomedical discovery
Full medical, dental, and vision coverage, including free therapy sessions and eyewear stipend
401(k) to help you build long-term financial security (US only)
Unlimited PTO to recharge when you need it (US only)
Lunch and snacks when you're in the office
Regular team offsites and company events
A culture of excellence and speed - we move fast, think big, and support each other every step of the way
Your work will directly impact our mission to 100X biomedical discoveries through AI