Director, Information Security - Security Engineering

Your work at Recursion, a clinical-stage biotechnology company, will involve leading a team to develop and implement security standards across IT and Cloud Infrastructure. You will ensure security and privacy by design throughout the technology stack and participate in efforts to achieve certifications and attestations. Additionally, you will be responsible for threat modeling, exploring new security threats, and incorporating security controls into the DevSecOps process. Joining a growing IT and Information Security team, you will collaborate with colleagues to address important challenges and capabilities in decoding biology.

Lead a team that develops and implements standards for Security across IT and Cloud Infrastructure and core software products

Ensure security & privacy by design across the technology stack

Participate in organizational efforts to accomplish SOC2 Type II, ISO 27001 and other certifications and attestations that demonstrate assurance internally within the organization and externally with Partners

Perform Threat modeling, explore new security threats, the technology controls and tactics required to mitigate those threats and incorporate them into the DevSecOps process

Develop strong partnerships within and outside the Technology organization to prioritize ongoing security improvements

Convey security concepts to non-technical audiences (e.g. senior and executive management, internal customers)

Hands-on Technical experience playing Security Architecture/Engineering roles across the different security domains

Understand system vulnerabilities, attack surfaces, attack vectors and tactics used in modern cyber attacks

Ongoing familiarity with new and prevalent technologies and IT systems

At least 10 years of relevant IT/Product Security experience and two or more relevant certifications (i.e. CISSP, CISM etc.)

Assessing cloud security, leading cross functional project teams, access control operations along with strong technical expertise are highly desirable

Have strong analytical, problem solving and critical thinking skills and the ability to support decisions that balance cybersecurity with ease-of-use

Experience leading security projects

Lead a team that develops and implements standards for Security across IT and Cloud Infrastructure and core software products

Ensure security & privacy by design across the technology stack

Participate in organizational efforts to accomplish SOC2 Type II, ISO 27001 and other certifications and attestations that demonstrate assurance internally within the organization and externally with Partners

Perform Threat modeling, explore new security threats, the technology controls and tactics required to mitigate those threats and incorporate them into the DevSecOps process

Develop strong partnerships within and outside the Technology organization to prioritize ongoing security improvements

Convey security concepts to non-technical audiences (e.g. senior and executive management, internal customers)

Hands-on Technical experience playing Security Architecture/Engineering roles across the different security domains

Understand system vulnerabilities, attack surfaces, attack vectors and tactics used in modern cyber attacks

Ongoing familiarity with new and prevalent technologies and IT systems

At least 10 years of relevant IT/Product Security experience and two or more relevant certifications (i.e. CISSP, CISM etc.)

Assessing cloud security, leading cross functional project teams, access control operations along with strong technical expertise are highly desirable

Have strong analytical, problem solving and critical thinking skills and the ability to support decisions that balance cybersecurity with ease-of-use

Experience leading security project through influence, collaboration, and coalition-building; and very comfortable in situations requiring constrained creativity to insure we are securing business systems and data

Understand and own every important detail as second nature

• Project through influence, collaboration, and coalition-building
• Comfortable in situations requiring constrained creativity
• Understand and own every important detail
• We Care: Caring about drug candidates, Recursionauts, their families, communities, and patients
• We Learn: Learning from diverse perspectives and failure
• We Deliver: High expectations for delivery with urgency
• Act Boldly with Integrity: Doing the right thing even when no one is looking
• We are One Recursion: Operating with a 'company first, team second' mentality
• Connection of work to company values
• Central mission of Recursion Operating System and Recursion Map
• Biotechnology company scaling like a technology company
• Equal Opportunity Employer valuing diversity and inclusion