SENIOR MANAGER, CYBERSECURITY & COMPLIANCETHE COMPANY: Element Science, Inc. is a medical device and digital health company focused on developing solutions at the intersection of clinical-grade wearables, machine learning algorithms, and lifesaving therapies in order to address leading causes of death and hospitalization in patients with heart disease, primarily as they transition from the hospital-to-home.
By putting the needs of patients and physicians first, our personalized digital devices, which are designed for function, comfort, and ease-of-use, aim to redefine the paradigm of care for these patients. Our first product, a wearable patch defibrillator, is initially targeted at treating the more than 500,000 patients in the US with an elevated temporary risk of potentially experiencing a lethal heart rhythm. Based in San Francisco, our funders include Third Rock Ventures, Google Ventures, Deerfield Healthcare, Qiming Venture Partners USA, Cormorant Asset Management, and Invus Opportunities.
SUMMARY OF ROLE:We are seeking a highly skilled and experienced Senior Manager of Cyber Security and Compliance to join our team. In this role, you will be responsible for overseeing all aspects of governance, risk, and compliance (GRC) related to cybersecurity and regulatory requirements within the organization. You will ensure that our company maintains compliance with relevant regulations and frameworks, including 21CFR, GXP, SOX, GAMP5, HIPAA, CCPA, and other applicable standards.
RESPONSIBILITIES:Review and assess the completeness of project documentation to ensure compliance with relevant regulations and frameworks, including 21CFR, GXP, SOX, GAMP5, HIPAA, CCPA, etc.Plan and execute initiatives to maintain compliance with regulatory requirements and industry standards including but not limited to periodic access reviews, annual external penetration tests to assess the security posture of our systems and infrastructure.Oversee applicable compliance activities, including review and testing of controls, documentation, and reporting.
Develop and implement policies, procedures, and controls to mitigate cybersecurity risks and ensure data protection.Collaborate with cross-functional teams to address compliance-related issues and implement remediation plans as needed.Stay abreast of emerging cybersecurity threats, regulatory changes, and industry best practices to proactively identify risks and opportunities for improvement.
Serve as a subject matter expert on cybersecurity and compliance matters, providing guidance and support to internal stakeholders.QUALIFICATIONS:Bachelor's degree in computer science, information technology, cybersecurity, or a related field; advanced degree preferred.5+ years of experience in cybersecurity and compliance roles, with a focus on governance, risk, and compliance (GRC).
Strong understanding of regulatory requirements and industry standards, including 21CFR, GXP, SOX, GAMP5, HIPAA, CCPA, etc.Experience leading and managing compliance initiatives, including contract penetration tests, SOX reviews, and regulatory audits.Excellent communication and interpersonal skills, with the ability to collaborate effectively with cross-functional teams and external stakeholders.
Strong analytical and problem-solving skills, with the ability to assess complex cybersecurity risks and develop effective mitigation strategies.Relevant certifications such as CISSP, CISM, CISA, CRISC, or equivalent are preferred.BENEFITS:Element Science offers a very competitive salary and benefits package including, but not limited to:Stock Options90% employer-paid medical, dental, and vision insuranceCompany-paid Basic Life Insurance401(k) retirement plan (Traditional and Roth)Competitive Paid Time OffPaid HolidaysFSA (Flexible Spending Accounts)HSA (Health Savings Account)Employee Assistance Program through PEOThe salary for this exempt-level position will be based on experience and qualifications within an established pay range.
Pay range: $160,000 - $167,000 + Annual BonusElement Science is an Equal Opportunity Employer. All candidates will be evaluated on the basis of their qualifications for the job in question. We do not base our employment decision on an employee's or applicant's race, color, religion, sex (including pregnancy, gender identity, and sexual orientation), parental status, national origin, age, disability, genetic information (including family medical history), political affiliation, military service, or other non-merit-based factors prohibited by local, state, or federal law.
In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire. We are not able to sponsor individuals for employment visas for this job. At this time, we are unable to offer relocation assistance at Element Science
