Senior Manager, IT & Cybersecurity

Algen Biotechnologies; San Francisco (CA); On-site; USD 180,000 - 210,000; Full time

Benefits offered by this job

Competitive compensation

Collaborative environment

Job summary

Algen seeks a hands-on Senior Manager, IT & Cybersecurity to lead the company’s IT infrastructure, security program, and day-to-day technology operations in a fast-growing biotech environment in San Francisco. You will own core IT systems, implement security controls, coordinate external assessments, and continuously improve the technology landscape.

You will work across teams to ensure secure, compliant data workflows and scalable IT processes, partnering with vendors and clinical data

Qualifications

• 5+ years of relevant experience in IT, information security, or technology infrastructure, with experience independently managing core IT/security responsibilities in a growing organization; biotechnology, life sciences, healthcare, or another sensitive-data environment preferred.
• Strong hands-on experience with endpoint management, IAM, MFA/SSO, SaaS administration, networking, systems administration, and employee IT support.
• Strong working knowledge of security controls, risk management, vulnerability remediation, incident response, third-party risk, and external security diligence or audits.
• Ability to translate operational and customer requirements into pragmatic, scalable IT and security processes without over-engineering.
• Strong judgment and communication skills, with the ability to work effectively across scientific, clinical, computational, business, legal, executive, and external teams.
• Working knowledge of GxP data governance requirements (GCP, GMP, and 21 CFR Part 11), including data classification, access controls, audit trails, and data integrity
• Strong fluency in FAIR data principles and experience operationalizing them in a real-world data program.
• Great to have: Experience with clinical data systems, EDC/eCRFs, clinical databases, regulated research data, or frameworks such as SOC 2, ISO 27001, NIST, or HIPAA.

Responsibilities

• IT operations & infrastructure: Manage the company’s day-to-day technology environment, including endpoints, employee support, onboarding/offboarding, hardware/software lifecycle, and core infrastructure; help evolve systems as the company grows.
• Identity, access & systems: Administer and improve IAM, MFA/SSO, device management, network/VPN, backups, SaaS applications, permissions, patching, logging, and secure configuration standards.
• Cybersecurity: Implement and maintain security policies, controls, risk assessments, vulnerability management, incident response, business continuity, and disaster recovery processes.
• External security readiness: Manage and coordinate security questionnaires, diligence, audits, penetration testing, and external assessments; maintain clear, audit-ready documentation and evidence.
• Vendor & external asset security: Manage security requirements for external stakeholders and oversee security for websites, domains/DNS, SSL/TLS, cloud services, and third-party integrations.
• Clinical data systems support: As needs arise, support secure, structured workflows for clinical and participant-level data, including EDC/eCRFs, data standards, validation/reconciliation, and data exchange with clinical sites.

Skills

Endpoint management

IAM MFA SSO

SaaS administration

Networking

Systems administration

IT support

Security controls

Risk management

Incident response

Third-party risk

Audits

GxP governance

FAIR data

Clinical data systems

Regulatory frameworks

Job description

Algen is an AI-native precision medicine company harnessing the power of CRISPR and functional genomics to transform drug discovery and development. A spin-out from the laboratory of Nobel Laureate Professor Jennifer Doudna, Algen was founded at the forefront of gene-editing innovation. We combine cutting-edge CRISPR technologies with advanced AI approaches to systematically modulate disease biology at scale and accelerate the path to effective treatments. Join us in redefining what's possible in AI-powered drug discovery.

Job Description

We are seeking a hands-on Senior Manager, IT & Cybersecurity to manage the company’s IT infrastructure, cybersecurity program, and day-to-day technology operations. This role will own key systems and security processes, maintain strong operational standards, and ensure employees have reliable, secure, and effective technology support.

You will work across the organization to manage core IT systems, implement and maintain security controls, coordinate external vendors and assessments, and continuously improve the company’s technology environment as the team and business evolve.

Key Responsibilities

• IT operations & infrastructure: Manage the company’s day-to-day technology environment, including endpoints, employee support, onboarding/offboarding, hardware/software lifecycle, and core infrastructure; help evolve systems as the company grows.
• Identity, access & systems: Administer and improve IAM, MFA/SSO, device management, network/VPN, backups, SaaS applications, permissions, patching, logging, and secure configuration standards.
• Cybersecurity: Implement and maintain security policies, controls, risk assessments, vulnerability management, incident response, business continuity, and disaster recovery processes.
• External security readiness: Manage and coordinate security questionnaires, diligence, audits, penetration testing, and external assessments; maintain clear, audit-ready documentation and evidence.
• Vendor & external asset security: Manage security requirements for external stakeholders and oversee security for websites, domains/DNS, SSL/TLS, cloud services, and third-party integrations.
• Clinical data systems support: As needs arise, support secure, structured workflows for clinical and participant-level data, including EDC/eCRFs, data standards, validation/reconciliation, and data exchange with clinical sites.

What We Are Looking For

• 5+ years of relevant experience in IT, information security, or technology infrastructure, with experience independently managing core IT/security responsibilities in a growing organization; biotechnology, life sciences, healthcare, or another sensitive-data environment preferred.
• Strong hands-on experience with endpoint management, IAM, MFA/SSO, SaaS administration, networking, systems administration, and employee IT support.
• Strong working knowledge of security controls, risk management, vulnerability remediation, incident response, third-party risk, and external security diligence or audits.
• Ability to translate operational and customer requirements into pragmatic, scalable IT and security processes without over-engineering.
• Strong judgment and communication skills, with the ability to work effectively across scientific, clinical, computational, business, legal, executive, and external teams.
• Working knowledge of GxP data governance requirements (GCP, GMP, and 21 CFR Part 11), including data classification, access controls, audit trails, and data integrity
• Strong fluency in FAIR data principles and experience operationalizing them in a real-world data program.
• Great to have: Experience with clinical data systems, EDC/eCRFs, clinical databases, regulated research data, or frameworks such as SOC 2, ISO 27001, NIST, or HIPAA.

We offer competitive compensation and benefits, along with a collaborative, mission-driven environment where you can have a meaningful impact as the company grows.