Skip to content

Open nowPosted 10 days ago

Director, Security and Compliance

Twist Bioscience42 open roles

Pay
$251,263 – $265,592 a year
Where
USA - South San Francisco, CA
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowDirector, Security and ComplianceTwist Bioscience · USA - South San Francisco, CA
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Twist Bioscience's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.3% of postings close within 7 days. Measured by our own scanner across the market. Twist Bioscience postings stay open a median of 36 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.3%7 days
  4. 19.3%14 days
  5. 35.6%30 days
  6. 58.1%60 days
This job: posted 10 days ago

Twist Bioscience median: 36 days open

The posting

Director, Security and Compliance

Job Overview

The Director of Security and Compliance is a strategic, highly technical leader responsible for designing, scaling, and overseeing our global information security and regulatory compliance programs. Reporting to the CIO, this role bridges the gap between technical security engineering, legal requirements, and business operations. Key responsibilities include defining our security posture, leading Governance, Risk, and Compliance (GRC) initiatives, and ensuring continuous alignment with industry frameworks.

The ideal candidate for this role is someone who doesn't just manage checklists but actively translates complex regulatory policies into practical, testable technical controls that allow our engineering and business teams to move fast without losing control.

Core Responsibilities

1. Governance, Risk & Compliance (GRC) Strategy

  • Framework Management: Lead the strategy, implementation, and continuous monitoring of core security frameworks relevant to our business (e.g., SOC 2, ISO 27001, NIST CSF, PCI DSS, HIPAA).
  • Data Privacy Adherence: Partner closely with Legal counsel to ensure corporate compliance with global data privacy regulations (e.g., GDPR, CCPA/CPRA).
  • Risk Management: Design and execute regular enterprise risk assessment programs. Identify vulnerabilities, prioritize risks based on business impact, and collaborate with department heads on remediation plans.
  • Policy Architecture: Draft, update, and enforce company-wide information security policies and procedures, ensuring they adapt to evolving engineering workflows (like CI/CD pipelines and infrastructure-as-code).

2. Security Operations & Oversight

  • Security Posture Optimization: Your Security Engineering team will partner with the IT Infrastructure team to monitor infrastructure security, access controls (IAM), and data encryption protocols.
  • Incident Response: Serve as a key leader on the Incident Response Team, helping to orchestrate investigations, mitigation efforts, and required regulatory disclosures in the event of a breach.
  • Third-Party Risk Management (TPRM): Oversee the security vetting process for vendors, software tools, and supply chain partners to minimize external risk exposure.

3. Audit & Stakeholder Management

  • Audit Readiness: Manage all external and internal security audits, coordinate evidence collection, manage relationships with auditors, and reduce duplicate controls across overlapping frameworks.
  • Customer & Sales Enablement: Act as the face of the company’s security posture for enterprise clients. Review security questionnaires, participate in prospective client calls, and help build trust to accelerate the sales cycle.
  • Executive Reporting: Translate highly complex technical data into concise business metrics for executive leadership and the Board of Directors, keeping them informed of our overall risk landscape.

4. Leadership & Culture

  • Team Development: Recruit, mentor, and manage a team of security analysts and compliance professionals.
  • Security Training: Develop and deliver engaging, modern security awareness training programs that foster a culture of vigilance across all business units.

Required Qualifications & Experience

  • Education: BS/MS degree in Computer Science, Information Systems, Cybersecurity, Business, or equivalent practical experience.
  • Experience: Minimum of 10 years of experience in information security, risk management, or compliance roles, with at least 5 years in a dedicated leadership or managerial capacity.
  • Cloud & Tech Savvy: Strong familiarity with AWS or similar cloud environments and modern compliance automation platforms (e.g., Vanta, Drata, Anecdotes).
  • Framework Fluency: Proven experience in successfully achieving and maintaining certifications such as SOC 2 Type II or ISO 27001 from the ground up.
  • Certifications: One or more relevant industry certifications are highly preferred (e.g., CISSP, CISM, CISA, CRISC, or CIPP).
  • Communication Style: Superb verbal and written communication skills. You must be equally comfortable diving deep into log management with engineers and explaining corporate risk to a non-technical board.

About Twist Bioscience

Twist Bioscience synthesizes genes from scratch, known as “writing” DNA. Just as children learn to both read and write, the next phase of development for the genomics revolution is the ability to write DNA.

At Twist Bioscience, we work in service of people who are changing the world for the better. In fields such as health care, agriculture, industrial chemicals and data storage, our unique silicon-based DNA Synthesis Platform provides precision at a scale that is otherwise unavailable to our customers.

Twist Bioscience Corporation is an Equal Opportunity Employer. Twist Bioscience Corporation provides equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, genetic characteristics, or any other category protected by law.

The base cash compensation for this California-based role is below. In addition to base salary, this role is eligible for bonus, equity, and a generous benefits package. Final compensation amounts are determined by multiple factors, including candidate skill, experience, expertise, and location and may vary from the amount listed above. Compensation may be different in other locations.

San Francisco Bay Area Pay Range

$251,263—$265,592 USD

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Twist Bioscience's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on Twist Bioscience's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    Twist Bioscience's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.