Manager, Information Security & Technology

A-Alpha Bio•Seattle, WA

1d•$135,000 - $169,000•Hybrid

About The Position

A-Alpha Bio is seeking a Manager, Information Security & Technology to own and lead our information security and technology program – encompassing information security, cloud infrastructure, laboratory technology, and technology governance. Success in this role depends on a combination of strategic planning and technical implementation, the ability to build strong internal and external partnerships, and a sense of ownership and accountability for technology outcomes. This position will require direct ownership, execution, and vendor management, rather than delegation through a dedicated internal team.

Requirements

Bachelor’s degree in a related field with 7+ years of experience in IT, cybersecurity, cloud administration, or technology operations; or an equivalent combination of education and experience.
Hands-on experience administering and securing AWS cloud environments, Microsoft 365, and Entra ID.
Experience implementing and operating a cybersecurity program aligned with the NIST Cybersecurity Framework (or comparable), including risk management, vulnerability remediation, governance, and vendor and MSP oversight.
Experience leading cross-functional cybersecurity, cloud, and infrastructure initiatives end-to-end through influence and technical expertise.
Ability to communicate technical concepts and risks to technical and non-technical audiences.
Strong writing skills in regards to policies, executive summaries, and customer-facing security responses.
Ability to develop pragmatic, fit-for-purpose solutions that balance security, laboratory, scientific, and business needs.

Nice To Haves

Professional certifications (CISSP, CISM, Security+, AWS, Microsoft, etc.).
Experience supporting regulated environments (life sciences, biotech, healthcare, SaaS).
Experience with Microsoft 365 security controls and AWS networking and security.
Experience with AI governance or emerging technologies.
Experience supporting laboratory or scientific computing environments.

Responsibilities

Own the company’s cybersecurity program and NIST-aligned roadmap.
Maintain security policies and procedures, control reviews, and corrective actions.
Manage risk assessments, penetration testing, and vulnerability remediation.
Develop security metrics, risk reporting, and executive dashboards.
Coordinate awareness and phishing training; support customer security reviews and questionnaires.
Lead AWS infrastructure and security improvements from risk assessments and operational reviews.
Manage cloud identity, access, encryption, logging, and monitoring.
Support disaster recovery and business continuity, partnering with Data Science on secure, maintainable cloud environments.
Own office and laboratory network security and architecture.
Assess, design, and implement network segmentation between corporate and laboratory environments, including compensating controls for legacy laboratory systems.
Manage firewalls, DNS, secure connectivity, and network access controls.
Support lab device and instrument integration, partnering with the MSP on reliable infrastructure.
Administer Microsoft 365 and Entra ID, including Conditional Access, Intune, identity governance, and endpoint security.
Manage application registrations, enterprise applications, user provisioning, and privileged access reviews.
Own administration and governance of key SaaS and enterprise applications with business owners, including access, licensing, integrations, and vendor escalations.
Coordinate response to application outages and service issues.
Establish AI governance and secure-use standards, including an inventory of approved AI tools and platforms.
Review technology vendors and SaaS applications for security risks.
Own MSP and security vendor relationships, performance, and accountability.
Lead technology, infrastructure, and security projects end-to-end, coordinating changes organization-wide.
Develop a multi-year technology roadmap and recommend appropriate investments in security, efficiency, and scalability.