ppBiorce is a pioneering Healthtech company dedicated to revolutionizing drug development through the power of AI. We are passionate about accelerating medical advancements and improving patient outcomes. /ppOur team comprises seasoned clinical research professionals, data scientists, and AI experts, working collaboratively to bridge the gap between cutting‑edge technology and real‑world clinical needs. /ppWith an unwavering commitment to revolutionize healthcare, we envision a world where all patients benefit from accelerated and cost‑effective access to treatments. Biorce is poised to redefine the landscape of healthcare, shaping a future where innovation and accessibility converge for the betterment of humanity. /ph3About the company /h3pBiorce is a pioneering Healthtech company dedicated to revolutionizing drug development through the power of AI. We are passionate about accelerating medical advancements and improving patient outcomes. /ppOur team comprises seasoned clinical research professionals, data scientists, and AI experts, working collaboratively to bridge the gap between cutting‑edge technology and real‑world clinical needs. /ppWith an unwavering commitment to revolutionize healthcare, we envision a world where all patients benefit from accelerated and cost‑effective access to treatments. Biorce is poised to redefine the landscape of healthcare, shaping a future where innovation and accessibility converge for the betterment of humanity. /ph3About the role /h3pFollowing our successful expansion into the U.S. and continued growth across Europe, we are seeking a bSenior Security Compliance Engineer /b to manage and elevate Biorce's security and compliance posture. /ppReporting directly to our bSecurity / Engineering leadership /b, this person will play a critical role getting our customers and partners' trust, driving the certifications audits, keeping our certification monitoring tool up to date, and working with different teams to keep internal processes running smoothly. /ppThis role will be key in embedding automated security checks,



compliance support, and incident response into the way our teams build and operate technology. /ph3Who We’re Looking For: /h3pThis is not a purely advisory or auditing role. We are looking for a hybrid operator who can lead heavy‑lift compliance frameworks (ISO 27001, SOC 2, ISO 27701) and possesses the technical capability to directly remediate non‑compliance findings, configure cloud security controls, and fix vulnerabilities in code and infrastructure—without needing to hand off tasks to dev teams. /ph3Key Responsibilities: /h3ulliDrive end‑to‑end implementation, audit readiness, and continuous management for ISO 27001, SOC 2 Type II, and other frameworks in the future. /liliOperate and optimize automated GRC platforms (Vanta) and maintain continuous evidence collection workflows /liliOwn internal security policy management, risk registers, vendor security assessments, and regulatory compliance aligned with healthtech data standards /liliAutonomously remediate identified non‑compliance findings and vulnerabilities across SaaS, cloud infrastructure, CI/CD pipelines, working with other teams when necessary /liliProactively oversee Biorce's internal IT stack, endpoint security (MDM), zero‑trust access controls, and identity management /liliProvide technical escalation support for internal security and IT service desk tasks to keep day‑to‑day operations secure and frictionless /li /ulh3Must-haves /h3ulliBachelor's or Master's degree in Computer Science, Cybersecurity, Information Security, or a related field, with 4+ years of experience in application or product security. /liliDemonstrated, hands‑on experience implementing, driving,



and maintaining ISO 27001 and SOC 2 Type II certifications /liliExperience working with GRC tools like Vanta, Drata, Secureframe, or similar compliance platforms. /liliProven ability to write code and infrastructure scripts (e.g., Python, Bash, Terraform/IaC) to directly fix cloud, IAM, and infrastructure gaps without dev team handoffs. /liliProven track record or strong enthusiasm for leveraging modern AI tools and scripts to automate workflows, accelerate evidence collection, and scale individual output /li /ulh3Nice-to-Haves /h3ulliExperience with infrastructure‑as‑code security, Terraform, Pulumi. /liliCertifications such as OSCP, OSWE, CISSP, or CSSLP. /liliExperience leading penetration testing efforts or coordinating with third‑party security assessors. /liliHands‑on experience performing security code reviews, threat modeling, and vulnerability assessments. /liliPractical experience with AppSec tools such as Aikido, Snyk, or equivalents, such as GitHub Advanced Security or SonarQube. /liliDirect exposure to or preparation for ISO 27701 or HIPAA/GDPR health data frameworks /li /ulh3Why Join Us? /h3ulliA dynamic work environment with an international team, where collaboration and diversity thrive. /liliWork alongside top talent, united by a shared purpose and committed to making a real impact. /liliComprehensive private health coverage to ensure your physical and mental well‑being. /liliHybrid work model offering flexibility to balance your professional and personal life. /liliCompany events to celebrate achievements and enjoy time together. /liliGet equipped with a MacBook to enhance your productivity and work experience. /liliOur office is pet‑friendly! You'll likely be greeted by a few wagging tails upon arrival. /li /ulp-- /ppBy submitting this application, I agree that my personal data will be collected, processed, and retained by the company solely for the purposes of managing and assessing my candidacy. /p /p #J-18808-Ljbffr

📌 Senior Security & Compliance Engineer - Austin (Barcelona)
🏢 Biorce
📍 Barcelona