Biorce is a pioneering Healthtech company dedicated to revolutionizing drug development through the power of AI. We are passionate about accelerating medical advancements and improving patient outcomes. Our team comprises seasoned clinical research professionals, data scientists, and AI experts, working collaboratively to bridge the gap between cutting‑edge technology and real‑world clinical needs.

With an unwavering commitment to revolutionize healthcare, we envision a world where all patients benefit from accelerated and cost‑effective access to treatments. Biorce is poised to redefine the landscape of healthcare, shaping a future where innovation and accessibility converge for the betterment of humanity.

About the company Biorce is a pioneering Healthtech company dedicated to revolutionizing drug development through the power of AI. We are passionate about accelerating medical advancements and improving patient outcomes. Our team comprises seasoned clinical research professionals, data scientists, and AI experts, working collaboratively to bridge the gap between cutting‑edge technology and real‑world clinical needs.

With an unwavering commitment to revolutionize healthcare, we envision a world where all patients benefit from accelerated and cost‑effective access to treatments. Biorce is poised to redefine the landscape of healthcare, shaping a future where innovation and accessibility converge for the betterment of humanity.

About the role Following our successful expansion into the U. S. and continued growth across Europe, we are seeking a Senior Security & Compliance Engineer to manage and elevate Biorce's security and compliance posture. Reporting directly to our Security / Engineering leadership , this person will play a critical role getting our customers and partners' trust, driving the certifications audits, keeping our certification monitoring tool up to date, and working with different teams to keep internal processes running smoothly.





This role will be key in embedding automated security checks, compliance support, and incident response into the way our teams build and operate technology. Who We’re Looking For: This is not a purely advisory or auditing role. We are looking for a hybrid operator who can lead heavy‑lift compliance frameworks (ISO 27001, SOC 2, ISO 27701) and possesses the technical capability to directly remediate non‑compliance findings, configure cloud security controls, and fix vulnerabilities in code and infrastructure—without needing to hand off tasks to dev teams.

Key Responsibilities: Drive end‑to‑end implementation, audit readiness, and continuous management for ISO 27001, SOC 2 Type II, and other frameworks in the future. Operate and optimize automated GRC platforms (Vanta) and maintain continuous evidence collection workflows Own internal security policy management, risk registers, vendor security assessments, and regulatory compliance aligned with healthtech data standards Autonomously remediate identified non‑compliance findings and vulnerabilities across Saa S, cloud infrastructure, CI/CD pipelines, working with other teams when necessary Proactively oversee Biorce's internal IT stack, endpoint security (MDM), zero‑trust access controls, and identity management Provide technical escalation support for internal security and IT service desk tasks to keep day‑to‑day operations secure and frictionless Must-haves Bachelor's or Master's degree in Computer Science, Cybersecurity, Information Security, or a related field, with 4+ years of experience in application or product security. Demonstrated,



hands‑on experience implementing, driving, and maintaining ISO 27001 and SOC 2 Type II certifications Experience working with GRC tools like Vanta, Drata, Secureframe, or similar compliance platforms.

Proven ability to write code and infrastructure scripts (e.g., Python, Bash, Terraform/Ia C) to directly fix cloud, IAM, and infrastructure gaps without dev team handoffs. Proven track record or strong enthusiasm for leveraging modern AI tools and scripts to automate workflows, accelerate evidence collection, and scale individual output Nice-to-Haves Experience with infrastructure‑as‑code security, Terraform, Pulumi.

Certifications such as OSCP, OSWE, CISSP, or CSSLP.

Experience leading penetration testing efforts or coordinating with third‑party security assessors. Hands‑on experience performing security code reviews, threat modeling, and vulnerability assessments. Practical experience with App Sec tools such as Aikido, Snyk, or equivalents, such as Git Hub Advanced Security or Sonar Qube.

Direct exposure to or preparation for ISO 27701 or HIPAA/GDPR health data frameworks Why Join Us? A dynamic work environment with an international team, where collaboration and diversity thrive. Work alongside top talent, united by a shared purpose and committed to making a real impact.

Comprehensive private health coverage to ensure your physical and mental well‑being. Hybrid work model offering flexibility to balance your professional and personal life. Company events to celebrate achievements and enjoy time together.

Get equipped with a Mac Book to enhance your productivity and work experience. Our office is pet‑friendly! You'll likely be greeted by a few wagging tails upon arrival. -- By submitting this application, I agree that my personal data will be collected, processed, and retained by the company solely for the purposes of managing and assessing my candidacy.

📌 Senior security & compliance engineer - austin (Madrid)
🏢 Biorce
📍 Madrid