Cyber Security Risk and Regulatory Analyst

Castle Biosciences • Friendswood, TX

2d • Onsite

About The Position

In this role, you'll serve as a key contributor to Castle Biosciences' cybersecurity risk and compliance efforts. Your day may include supporting FDA cybersecurity submissions, partnering with cross-functional teams to maintain SOC 2 compliance, monitoring security controls, and communicating risk insights to leadership and business stakeholders. You'll play an important role in ensuring our products and operations meet regulatory requirements while helping strengthen the organization's overall security posture.

Requirements

• Bachelor's degree in Cybersecurity, Information Systems, Computer Science, or related field, or equivalent experience.
• 2+ years' experience with FDA cybersecurity guidance for medical devices, including premarket submissions, Secure Product Development Framework (SPDF), and SBOM requirements.
• 2+ years' direct experience supporting SOC 2 Type I/II audits, including control design and evidence management.
• Familiarity with risk management frameworks such as NIST CSF, NIST 800-30, or ISO 27001/27005.

Responsibilities

• Supporting FDA cybersecurity submissions
• Partnering with cross-functional teams to maintain SOC 2 compliance
• Monitoring security controls
• Communicating risk insights to leadership and business stakeholders

Benefits

• Excellent Annual Salary + 20% Bonus Potential
• 20 Accrued PTO Days Annually
• 10 Paid Holidays
• 401K with 100% Company Match up to 6%
• 3 Health Care Plan Options
• Company HSA Contribution
• Company Stock Grant Upon Hire
• Professional development

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level