Kardigan

Kardigan

Senior Manager, IT Cybersecurity & Compliance

South San Francisco, California, United States · Senior

Sponsorship not specifiedDetected 1 day ago
CybersecurityIncident ResponseComplianceStakeholder ManagementProcurementResearchLeadershipCommunicationCollaborationSarbanes-OxleyGxP

About the role

  • We believe in being authentic -leading with truth to bring out the best in others by creating an environment where every person knows they will be fully accepted.
  • With an eagerness to learn, we encourage the highest levels of curiosity and are open to changing our minds.
  • These values are the foundation of our work, empowering us to make a real difference, every day.

Responsibilities

  • maintain metrics, reporting, and continuous improvement activities.
  • SOX compliance (ITGC): Support and maintain IT General Controls in scope for SOX (access controls, change management, computer operations, system development where applicable).
  • Privacy and regulatory compliance: Partner with Privacy/Legal to support GDPR and other applicable privacy requirements, including security controls, data protection impact inputs, and vendor processing/security reviews.
  • GxP/regulated environment compliance: Help ensure IT controls and practices support GxP expectations (e.g., validated systems, data integrity/ALCOA+ principles, audit trails, controlled access, change control, backup/restore, and incident handling) in partnership with Quality.
  • Identity, access, and permissions governance: Operate access governance processes (role design, least privilege, segregation of duties, periodic access reviews).
  • Risk management: Maintain the IT security risk register
  • perform periodic risk assessments, threat modeling (as appropriate), and control gap analyses
  • Vulnerability management: Manage the vulnerability management program including scanning, prioritization, remediation SLAs, exception handling, and reporting
  • partner with Infrastructure, Application owners, and vendors to drive timely remediation.
  • Security governance and program leadership: Help define and execute the IT security and compliance roadmap and operating processes; maintain metrics, reporting, and continuous improvement activities.

Requirements

  • Bachelor's degree in Information Security, Information Systems, Computer Science, or equivalent practical experience.
  • 7+ years of progressive experience in IT, information security, risk management, and/or IT compliance, including experience leading projects, programs, or small teams.
  • Working knowledge of GDPR security requirements and privacy-supporting controls.

Compensation

  • Security awareness and training: Run user security training and awareness programs (onboarding, annual training, targeted campaigns, phishing simulations, role-based training), and measure effectiveness through reporting and follow-up actions.

Company info

  • Kardigan is a heart health company working to make cardiovascular disease preventable, curable and no longer the leading cause of death in the world.
  • It is Kardigan's mission to develop multiple targeted treatments in parallel that bring people with cardiovascular diseases to the cures they deserve.
  • Led by Tassos Gianakakos, Jay Edelberg, M.D., Ph.D., and Bob McDowell, Ph.D., Kardigan's co-founders have reunited after leading MyoKardia to discover and develop mavacamten, the first cardiac myosin inhibitor, resulting in an acquisition by Bristol Myers Squibb in 2020.
  • We have a cutting-edge discovery and translational research platform, a pipeline of late-stage candidates, and an industry-leading team that is driven to improve the lives of patients.
  • At Kardigan, we are motivated by our values which guide how we work, interact, and achieve our goals.
  • Driven by patients and their families, we are deeply committed to improving the lives of patients and prioritizing their needs above all else.
  • We are committed to winning as a team with urgency, excellence, and intention, and support each other no matter what role we play or where we sit.
  • Lastly, we strive to enable the impossible because patients are counting on us.
  • We are not afraid to take risks to unlock innovation and advance scientific discoveries.
  • Position Title: Senior Manager, IT Cybersecurity & Compliance
Apply directly at Kardigan →Create a free account for alerts like thisView Kardigan immigration profile

This listing is sourced directly from Kardigan's careers page and normalized into a canonical job model.