About the Role
Phylo is seeking a hands-on Security & Compliance Lead to establish and expand its security, privacy, and compliance program. This role involves owning the compliance roadmap, managing audits and customer reviews, and collaborating with engineering to implement practical controls.
Responsibilities
- Own Phylo’s security and compliance roadmap.
- Lead SOC 2, ISO 27001 and GDPR readiness, audits, evidence collection, and remediation.
- Build HIPAA-ready processes for workloads involving protected health information.
- Assess and plan for FedRAMP, NIST, privacy, and life-sciences requirements where applicable.
- Partner with engineers to implement scalable controls across cloud infrastructure, applications, and AI systems.
- Lead customer questionnaires, RFPs, due diligence, and security conversations.
- Run risk assessments and drive remediation across systems, vendors, and processes.
- Maintain lightweight policies, customer-facing security documentation, and compliance reporting.
- Automate evidence collection, monitoring, and other compliance workflows.
Requirements
- 5+ years in security GRC, compliance, or a security engineering-adjacent role.
- Experience leading SOC 2, ISO 27001, HIPAA, FedRAMP, or similar programs.
- Strong understanding of cloud and application security.
- Ability to translate regulatory requirements into technical controls.
- Experience supporting audits and enterprise customer security reviews.
- Strong cross-functional communication and program ownership.
- A pragmatic, hands-on approach suited to an early-stage company.
Skills
- Security GRC
- Compliance
- Security engineering
- Cloud security
- Application security
- SOC 2
- ISO 27001
- HIPAA
- FedRAMP
- NIST
- GDPR
- Risk assessment
- Policy development
- Security documentation
- Compliance reporting
- Automation
- AI governance
Location
- Remote
Work Type
- Full-time
Experience Level
- 5+ years
Benefits
- Competitive salary and equity share
- Full medical, dental, and vision coverage
- Free therapy sessions
- Eyewear stipend
- 401(k) (US only)
- Unlimited PTO (US only)
- Lunch and snacks when in the office
- Regular team offsites and company events
About the Company
- Phylo is an applied research lab building agentic intelligence to accelerate biomedical discovery.
- Spun out of Stanford’s Biomni project, our team brings together researchers, engineers, and scientists across AI and biology.
- We are backed by a $13.5 million seed round led by a16z, Menlo Ventures, and Anthropic.
