Director of Security & Compliance: Lead GRC, Audits & Trust

Twist Bioscience Corporation; South San Francisco (CA); On-site; USD 251,000 - 266,000; Full time

Benefits offered by this job

Bonus

Equity

Benefits

Job summary

Twist Bioscience Corporation seeks a Director of Security and Compliance to design, scale, and oversee global information security and regulatory compliance programs. Reporting to the CIO, you will align engineering, legal, and business teams to maintain a strong security posture across systems and processes.

You will lead GRC strategy, incident response, third‑party risk, audits, and executive reporting, while mentoring a team of security professionals and delivering practical, testable

Qualifications

• BS/MS in CS/IS/Cybersecurity/Business or equivalent practical experience.
• 10+ years in information security, risk management, or compliance; 5+ in leadership.
• Cloud experience with AWS or similar.
• Certifications such as CISSP, CISM, CISA, CRISC, or CIPP preferred.
• Strong communication skills for technical and non-technical audiences.

Responsibilities

• Define security posture and lead GRC initiatives.
• Oversee security operations, IAM, and encryption controls.
• Manage third‑party risk and vendor vetting.
• Lead audits and coordinate evidence with auditors.
• Translate security metrics for executives and board.
• Recruit and develop security team; deliver security training.

Skills

Leadership

GRC Strategy

Cloud AWS

Security Operations

Policy Development

Stakeholder Communication

Education

BS/MS in Computer Science / Information Systems / Cybersecurity / Business

Tools

Vanta

Drata

Anecdotes

Job description

Twist Bioscience Corporation seeks a Director of Security and Compliance to design, scale, and oversee global information security and regulatory compliance programs. Reporting to the CIO, you will align engineering, legal, and business teams to maintain a strong security posture across systems and processes.

You will lead GRC strategy, incident response, third‑party risk, audits, and executive reporting, while mentoring a team of security professionals and delivering practical, testable