Skip to content

Open nowPosted 91 days ago

Senior Manager, Information Security and Compliance

Parabilis Medicines17 open roles

Pay
$165,000 – $195,000 a year
Where
Cambridge or Remote
Work mode
Remote
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSenior Manager, Information Security and ComplianceParabilis Medicines · Cambridge or Remote
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Parabilis Medicines's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.7% of postings close within 7 days. Measured by our own scanner across the market. Parabilis Medicines postings stay open a median of 50 days.

Share of postings closed within
  1. 2.2%1 day
  2. 4.5%3 days
  3. 12.7%7 days
  4. 20.4%14 days
  5. 35.6%30 days
  6. 58.7%60 days
This job: posted 91 days ago

Parabilis Medicines median: 50 days open

The posting

About Parabilis Medicines

At Parabilis Medicines, we are redefining what's possible in drug discovery. We are a clinical-stage biopharmaceutical company dedicated to creating unique and extraordinary medicines for patients with serious diseases by unlocking biologically important targets long considered beyond the reach of conventional medicines. Our intent is to create an important long-lived company partnering with patients, healthcare providers, researchers, investors and strategic collaborators who share our curiosity, determination and commitment to create real-world impact.

Our proprietary Helicon™ platform has pioneered a new class of stabilized alpha-helical peptides capable of modulating intracellular proteins that have historically been considered "undruggable." Our lead investigational medicine, zolucatetide, is the first and only direct inhibitor of the β-catenin interaction that has demonstrated compelling early clinical activity across a range of Wnt/β-catenin-driven diseases, including desmoid tumors, familial adenomatous polyposis (FAP), adamantinomatous craniopharyngioma (ACP), hepatocellular carcinoma (HCC) and other solid tumor indications. We are also advancing a growing pipeline of additional medicines including franchise-extended beta catenin degraders, and Helicon peptides targeting prostate cancer and a range of other cancers. Our platform is advanced and continues to evolve in its reach of the most important protein causal drivers of diseases. Our mission is clear: transform the lives of more patients, and their families and communities.

As a member of the Parabilis team, you'll work alongside scientists, clinicians, and innovators who are driven by curiosity, collaboration, and a shared commitment to tackling some of the most difficult challenges in medicine. Together, we're building the next generation of therapies for patients who need them most. For more information, visit www.parabilismed.com or follow us on LinkedIn.

What’s the opportunity?

Parabilis Medicines, Inc. is seeking a hands-on, experienced Security and Compliance Senior Manager to join our lean and high-impact technology team. As a recently public company operating under SOX, GxP, HIPAA, and SOC2 frameworks, Parabilis relies on a strong security and compliance posture to protect its science, its data, and its patients. This role owns that posture in partnership with the Sr. Director of IT.

Reporting to the Sr. Director of IT, this role is focused primarily on technical security, with compliance and quality integration as a constant second thread. You will implement and operate security controls, manage the vendors and consultants who support them, and work across every technical team to ensure they operate securely and within our established policies, procedures, and QA guidance. You will direct the work of MSP contractors, consultants, and vendor partners to deliver outcomes. This role is not just policy setting and enforcement. We are looking for someone who can be hands-on-keyboard for the activities that warrant it.

The ideal candidate is a security practitioner who is equally comfortable configuring an endpoint detection platform, leading an incident response, and sitting with QA to make sure a change control workflow satisfies both a real threat model and an auditor.

Key Responsibilities:

Security Operations & Controls Implementation

  • Implement, configure, and operate security controls across endpoint, identity, network, and cloud, including endpoint detection and response, managed detection and response, and software and extension controls.
  • Own the endpoint security roadmap and drive execution across the environment, including migration off legacy tooling to a modern EDR/MDR stack.
  • Design and enforce identity and access controls across Okta, Entra ID, and connected systems, including least-privilege access, access recertification, and privileged access management.
  • Partner with Cloud Architecture to embed security into AWS multi-account infrastructure, including guardrails, network segmentation, logging, and posture management.
  • Serve as the technical lead for security tooling evaluations, proofs of concept, and rollouts, staying hands-on where depth is required.

Compliance, Quality & Policy Integration

  • Maintain intimate familiarity with Parabilis policies, SOPs, and QA guidance, and ensure all technical teams operate securely and within that framework.
  • Translate SOX ITGC, GxP, HIPAA, and SOC2 requirements into practical, enforceable technical controls and repeatable operating practices.
  • Partner with QA to align security controls with validated-system requirements, change control, and data integrity expectations.
  • Own control documentation, evidence collection, and traceability to support internal reviews and external audits, and act as a primary technical point of contact during audit activity.
  • Contribute to and enforce IT policy, working with the Sr. Director of IT to set standards and best practices across the organization.

Vendor & Consultant Management

  • Manage security and compliance vendors, MSP contractors, and specialist consultants, directing their work to deliver defined outcomes on schedule.
  • Own vendor risk assessment for new and existing technology partners, including privacy, data handling, and terms-of-service review in coordination with Legal and IT leadership.
  • Hold vendors accountable to SLAs, security commitments, and contractual obligations, and escalate where performance or risk warrants.

Incident Response

  • Own the security incident response process end to end, from detection and triage through containment, remediation, and post-incident review.
  • Respond to security incident reports, coordinate the technical response across internal teams and vendors, and drive incidents to closure with clear documentation.
  • Maintain and exercise incident response and business continuity runbooks, and feed lessons learned back into controls and policy.
  • Support regulatory, legal, and breach-notification obligations in coordination with IT leadership, QA, and Legal when incidents carry compliance impact.

Collaboration & Influence

  • Report to the Sr. Director of IT and work collaboratively with cross-functional teams across the organization to maintain the company's security and compliance posture across all systems.
  • Act as a trusted advisor to Engineering, Research, Clinical, and Enterprise teams, embedding secure and compliant practices into how they build and operate.
  • Communicate risk clearly to both technical and non-technical audiences, and advocate for pragmatic controls that enable the business rather than block it.

What you’ll need to be successful:

  • 6+ years of hands-on experience in technical security, ideally within regulated industries
  • Bachelor’s degree in Computer Science, Information Systems, or related field preferred
  • Demonstrated experience operating within a regulated compliance environment (FDA/GxP, HIPAA, SOX, or SOC2), ideally in life sciences, healthcare, or another audited industry.
  • Hands-on expertise across endpoint security (EDR/MDR), identity and access management (Okta, Entra ID), and cloud security (AWS multi-account environments).
  • Practical experience implementing and operating security controls and mapping them to compliance frameworks and audit requirements.
  • Proven ability to lead incident response and manage security and compliance vendors and consultants to deliver outcomes.
  • Working knowledge of QA and change control practices in a regulated environment, and the judgment to make controls satisfy both security and compliance goals.
  • Comfort operating in a lean team: setting priorities independently, staying hands-on, and directing external partners without relying on direct reports.
  • Proficiency in scripting (PowerShell, Python, or equivalent) for automation and integration.
  • Exceptional communication skills and the ability to influence cross-functional teams without direct authority.
  • CISA (compliance and audit focus) and/or CISSP (security focus) preferred

Core Values

Parabilis Medicines is a team of passionate pioneers who are trailblazing the future of precision medicine with the aim of making a meaningful difference in the lives of patients. The company is committed to promoting an inspiring and flourishing working environment for all employees across the business, in all departments, and driving innovation for patient benefit.

  • Growth-Minded. We’re inventing a new class of medicines—one applicable to therapeutic targets that have been dreamt about, but always considered impossible to drug. Our work requires us to be curious, humble and adaptable.
  • In(ter)dependent. We are fiercely independent as a leader in defying the limitations of current therapeutic modalities, and interdependent as a team as we work collaboratively to shift drug discovery paradigms and provide patients with better treatment options.
  • Patient-focused. We are deeply focused on patient outcomes, and all energy in the company is focused on science as it translates to patient impact.
  • All-In. We’re All-In on solving some of the hardest scientific challenges and delivering one of the most effective new classes of drugs in history.

The base salary range for this position is $165,000-$195,000, depending on experience, qualifications, and internal practices. Parabilis’s total compensation package also includes an annual target bonus, equity, and a comprehensive suite of competitive benefits designed to support our employees’ overall well-being.

As an equal opportunity employer, Parabilis Medicines values an inclusive workplace and welcomes applicants of all backgrounds and experiences. All qualified applicants will receive consideration for employment without discrimination on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability, or any other factors prohibited by law.

30 Acorn Park Drive | Cambridge, MA 02140 | www.parabilismed.com

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Parabilis Medicines's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on Parabilis Medicines's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    Parabilis Medicines's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.