Phylo

Security Engineer

• Own Phylo’s security and compliance roadmap.
• Lead SOC 2, ISO 27001 and GDPR readiness, audits, evidence collection, and remediation.
• Build HIPAA-ready processes for workloads involving protected health information.
• Assess and plan for FedRAMP, NIST, privacy, and life-sciences requirements where applicable.
• Partner with engineers to implement scalable controls across cloud infrastructure, applications, and AI systems.
• Lead customer questionnaires, RFPs, due diligence, and security conversations.
• Run risk assessments and drive remediation across systems, vendors, and processes.
• Maintain lightweight policies, customer-facing security documentation, and compliance reporting.
• Automate evidence collection, monitoring, and other compliance workflows.

Security GRC Specialist