Senior Manager, Information Security and Compliance in Cambridge

About Parabilis Medicines

At Parabilis Medicines, we are redefining what's possible in drug discovery. We are a clinical-stage biopharmaceutical company dedicated to creating unique and extraordinary medicines for patients with serious diseases by unlocking biologically important targets long considered beyond the reach of conventional medicines. Our intent is to create an important long-lived company partnering with patients, healthcare providers, researchers, investors and strategic collaborators who share our curiosity, determination and commitment to create real-world impact.

Our proprietary Helicon™ platform has pioneered a new class of stabilized alpha-helical peptides capable of modulating intracellular proteins that have historically been considered "undruggable." Our lead investigational medicine, zolucatetide, is the first and only direct inhibitor of the β-catenin interaction that has demonstrated compelling early clinical activity across a range of Wnt/β-catenin-driven diseases, including desmoid tumors, familial adenomatous polyposis (FAP), adamantinomatous craniopharyngioma (ACP), hepatocellular carcinoma (HCC) and other solid tumor indications. We are also advancing a growing pipeline of additional medicines including franchise-extended beta catenin degraders, and Helicon peptides targeting prostate cancer and a range of other cancers.

Our mission is clear: transform the lives of more patients, and their families and communities. As a member of the Parabilis team, you'll work alongside scientists, clinicians, and innovators who are driven by curiosity, collaboration, and a shared commitment to tackling some of the most difficult challenges in medicine. Together, we're building the next generation of therapies for patients who need them most.

What’s the opportunity?

Parabilis Medicines, Inc. is seeking a hands-on, experienced Security and Compliance Senior Manager to join our lean and high-impact technology team. As a recently public company operating under SOX, GxP, HIPAA, and SOC2 frameworks, Parabilis relies on a strong security and compliance posture to protect its science, its data, and its patients. This role owns that posture in partnership with the Sr. Director of IT. Reporting to the Sr. Director of IT, this role is focused primarily on technical security, with compliance and quality integration as a constant second thread.

Key Responsibilities:

• Implement, configure, and operate security controls across endpoint, identity, network, and cloud, including endpoint detection and response, managed detection and response, and software and extension controls.
• Own the endpoint security roadmap and drive execution across the environment, including migration off legacy tooling to a modern EDR/MDR stack.
• Design and enforce identity and access controls across Okta, Entra ID, and connected systems, including least-privilege access, access recertification, and privileged access management.
• Partner with Cloud Architecture to embed security into AWS multi-account infrastructure, including guardrails, network segmentation, logging, and posture management.
• Serve as the technical lead for security tooling evaluations, proofs of concept, and rollouts, staying hands-on where depth is required.
• Maintain intimate familiarity with Parabilis policies, SOPs, and QA guidance, and ensure all technical teams operate securely and within that framework.
• Translate SOX ITGC, GxP, HIPAA, and SOC2 requirements into practical, enforceable technical controls and repeatable operating practices.
• Partner with QA to align security controls with validated-system requirements, change control, and data integrity expectations.
• Own control documentation, evidence collection, and traceability to support internal reviews and external audits, and act as a primary technical point of contact during audit activity.
• Manage security and compliance vendors, MSP contractors, and specialist consultants, directing their work to deliver defined outcomes on schedule.
• Own vendor risk assessment for new and existing technology partners, including privacy, data handling, and terms-of-service review in coordination with Legal and IT leadership.
• Own the security incident response process end to end, from detection and triage through containment, remediation, and post-incident review.
• Report to the Sr. Director of IT and work collaboratively with cross-functional teams across the organization to maintain the company's security and compliance posture across all systems.

What you’ll need to be successful:

• 6+ years of hands-on experience in technical security, ideally within regulated industries.
• Bachelor’s degree in Computer Science, Information Systems, or related field preferred.
• Demonstrated experience operating within a regulated compliance environment (FDA/GxP, HIPAA, SOX, or SOC2), ideally in life sciences, healthcare, or another audited industry.
• Hands-on expertise across endpoint security (EDR/MDR), identity and access management (Okta, Entra ID), and cloud security (AWS multi-account environments).
• Proven ability to lead incident response and manage security and compliance vendors and consultants to deliver outcomes.
• Exceptional communication skills and the ability to influence cross-functional teams without direct authority.

Core Values

Parabilis Medicines is a team of passionate pioneers who are trailblazing the future of precision medicine with the aim of making a meaningful difference in the lives of patients. The company is committed to promoting an inspiring and flourishing working environment for all employees across the business, in all departments, and driving innovation for patient benefit.