Director of Security & Compliance

The role

You will build and own the security program from the ground up to protect the company, clients, and intellectual property. You will formalize security policies and serve as the external voice on security and data protection for pharmaceutical clients and industry partners.

What you will do

• Protect the organization from external and internal security threats across platform, infrastructure, and corporate systems.
• Assess risks, determine credible threats, and lead the response.
• Build and formalize security policies, standards, and procedures.
• Partner with US and international law firms to draft, implement, and enforce policies.
• Safeguard sensitive scientific, clinical, and commercial data.
• Monitor international data and security regulations and advise leadership on cross-border data sharing and geopolitical risk.
• Represent AlphaLife at industry conferences and serve as the primary security point of contact for clients and partners.
• Own compliance certifications and framework alignment including ISO 27001, SOC 2, GxP, and HIPAA.

Required qualifications

• Bachelor's or Master's degree in Computer Science, Cybersecurity, Information Systems, or a related field.
• 10 years of experience in cybersecurity, information security, or security compliance, including experience building or leading a security program.
• Strong technical foundation in cloud security, application security, and threat detection and response.
• Experience protecting sensitive data in life sciences, pharma, biotech, or another highly regulated industry.
• Deep understanding of intellectual property and experience safeguarding proprietary scientific or commercial information.
• Working knowledge of international data protection and security regulations and cross-border data transfer requirements.
• Deep familiarity with life science industry data protection and regulatory compliance policy, including HIPAA and GxP, and frameworks such as ISO 27001 and SOC 2.
• Experience working with outside legal counsel to draft and implement policy.
• Excellent communication skills and executive presence.
• Comfortable working in a fast-paced startup environment with ambiguity and evolving priorities.

Nice to have

• Certifications such as CISSP, CISM, CISA, or CCSP.
• Experience leading SOC 2 or ISO 27001 efforts at a startup or growth-stage company.
• Hands-on experience with 21 CFR Part 11 and computer system validation.
• Experience operating in or alongside the China market.
• IT and security leadership or data protection experience at a big pharma, or regulatory policy leadership at a life science SaaS company.
• Background securing AI/ML or Generative AI platforms.

Before you apply

• Applicants must be authorized to work in the United States without the need for current or future visa sponsorship.
• AlphaLife Sciences is unable to sponsor visas for applicants.

About the company

AlphaLife Sciences is a pioneer in the fusion of life sciences and AI computer science as an AI-enabled integrated clinical research platform. Their flagship product, AuroraPrime, integrates Generative AI and Large Language Models into a SaaS platform.