Security & Compliance Lead for AI Biomed Platforms

Phylo; South San Francisco (CA); On-site; USD 140,000 - 210,000; Full time

Benefits offered by this job

Medical benefits

Equity

Unlimited PTO

Office lunches

Job summary

Phylo is an applied research lab building agentic intelligence to accelerate biomedical discovery. We’re hiring a hands-on Security & Compliance Lead to build and scale Phylo’s security, privacy, and compliance program.

You’ll own our compliance roadmap, lead audits and customer reviews, and work closely with engineering to turn requirements into practical controls. You’ll partner with engineers to implement scalable controls across cloud infrastructure, applications, and AI systems, and drive

Qualifications

• 5+ years in security GRC, compliance, or security engineering-adjacent role.
• Experience leading SOC 2, ISO 27001, HIPAA, FedRAMP, or similar programs.
• Strong understanding of cloud and application security.
• Ability to translate regulatory requirements into technical controls.
• Experience supporting audits and enterprise customer security reviews.
• Strong cross-functional communication and program ownership.
• A pragmatic, hands-on approach suited to an early-stage company.

Responsibilities

• Own Phylo’s security and compliance roadmap.
• Lead SOC 2, ISO 27001, and GDPR readiness, audits, evidence collection, and remediation.
• Build HIPAA-ready processes for workloads involving PHI.
• Assess and plan for FedRAMP, NIST, privacy, and life-sciences requirements.
• Partner with engineers to implement scalable controls across cloud infrastructure, applications, and AI systems.
• Lead customer questionnaires, RFPs, due diligence, and security conversations.
• Run risk assessments and drive remediation across systems, vendors, and processes.
• Maintain lightweight policies, customer-facing security documentation, and compliance reporting.
• Automate evidence collection, monitoring, and other compliance workflows.

Skills

Security governance

Compliance leadership

Cloud security

Risk management

Audits & reviews

Cross-functional communication

Education

Bachelor's degree in CS/IS

Tools

Cloud platforms (AWS/Azure)

GRC tooling

Job description

Phylo is an applied research lab building agentic intelligence to accelerate biomedical discovery. We’re hiring a hands-on Security & Compliance Lead to build and scale Phylo’s security, privacy, and compliance program.

You’ll own our compliance roadmap, lead audits and customer reviews, and work closely with engineering to turn requirements into practical controls. You’ll partner with engineers to implement scalable controls across cloud infrastructure, applications, and AI systems, and drive