Senior InfoSec GRC Specialist

About Velsera

Medicine moves too slow. At Velsera, we are changing that.

Velsera was formed in 2023 through the shared vision of Seven Bridges and Pierian, with a mission to accelerate the discovery, development, and delivery of life-changing insights.

Velsera provides software and professional services for:

• AI-powered multimodal data harmonization and analytics for drug discovery and development
• IVD development, validation, and regulatory approval
• Clinical NGS interpretation, reporting, and adoption

With our headquarters in Boston, MA, we are growing and expanding our teams located in different countries!

What will you do?

Compliance & Governance

• Develop, implement, and maintain comprehensive information security policies, standards, and procedures aligned with the ISO 27001 framework
• Lead, manage, and mature the organization's Information Security Management System including risk treatment, internal audits, and readiness for external certification audits.
• Serve as the subject matter expert (SME) for Security and Privacy Rules, ensuring compliance for all systems, processes, and applications handling PII and Protected Health Information (PHI).
• Conduct continuous monitoring and evidence collection to demonstrate compliance with relevant frameworks.
• Plan, conduct and manage internal and supplier audits
• Plan GRC act