Director of Security & Compliance (GRC Strategy)

twistbioscience; South San Francisco (CA); On-site; USD 180,000 - 280,000; Full time

Job summary

Twist Bioscience seeks a Director of Security and Compliance to design, scale, and supervise our global information security and regulatory programs. You will report to the CIO and align security with engineering, legal, and business operations to enable fast, compliant development.

You will lead governance, risk, and compliance initiatives, transform complex regulatory policies into practical controls, and drive security across CI/CD pipelines and infrastructure.

Qualifications

• BS/MS degree in Computer Science, Information Systems, Cybersecurity, Business, or equivalent practical experience.
• 10+ years in information security, risk management, or compliance; 5+ years in leadership.
• Experience with AWS or similar cloud environments and compliance automation platforms.
• Certifications such as CISSP, CISM, CISA, CRISC, or CIPP preferred.
• Strong written and verbal communication; able to explain risk to non-technical stakeholders.

Responsibilities

• Lead GRC strategy, implement and monitor core security frameworks (SOC 2, ISO 27001, NIST CSF, PCI DSS, HIPAA).
• Oversee security posture, IAM, data encryption, and CI/CD security integration.
• Manage audits, coordinate evidence, and liaise with auditors.
• Oversee third-party risk management and produce executive reporting for the Board.

Skills

Leadership

Governance

Strategic thinking

Communication

Education

BS/MS in Computer Science or Cybersecurity or equivalent

Tools

Vanta

Drata

Anecdotes

Job description

Twist Bioscience seeks a Director of Security and Compliance to design, scale, and supervise our global information security and regulatory programs. You will report to the CIO and align security with engineering, legal, and business operations to enable fast, compliant development.

You will lead governance, risk, and compliance initiatives, transform complex regulatory policies into practical controls, and drive security across CI/CD pipelines and infrastructure.