Information Security & Compliance, Manager (1 Year Contract) at Lucence

About us:

Lucence is a pioneering precision oncology company with a bold vision: a world where cancer is defeated through early detection and timely treatment. Our cutting-edge liquid biopsy tests use advanced molecular profiling to guide personalized cancer therapies, transforming how cancer is diagnosed and treated. At Lucence, we are shaping the future of precision medicine by capturing both genetic and cellular data from a single blood draw, bringing us closer to our mission of overcoming cancer.

We are looking for an Information Security & Compliance Manager to lead Lucence’s SOC 2 compliance programmes. You will own our internal controls, audits, and security governance frameworks, ensuring the company meets the standards required for global diagnostics operations.

Key Responsibilities

• Compliance Ownership
  Own SOC 2 Type I/II, and build on HIPAA and cybersecurity certification roadmaps. Maintain documentation, evidence repositories, and ongoing readiness.
   
• Internal Controls & Policies
  Build, refine, and enforce security policies, risk registers, and access-control processes.
   
• Audit Management
  Partner with external auditors, coordinate internal contributors, drive remediation plans, and ensure timely closure of findings.
   
• Vendor & Data Protection Reviews
  Conduct security due diligence for vendors, manage DPAs, and ensure data-flow compliance for global partners.
   
• Security Governance
  Implement quarterly control testing, internal audits, DR/BCP drills, and continuous monitoring of compliance gaps.
   
• Cross-Functional Partnering
  Work closely with external vendors, Informatics, IT, Lab Ops, and Commercial teams to embed security into product and operational workflows.

Preferred Qualifications

• Experience owning SOC 2 or ISO audit cycles end-to-end.
   
• Familiarity with cloud environments (AWS/Azure/GCP) and modern security tooling.
   
• Attention to detail to improve policies, controls, and audit documentation.
   
• Certifications: ISO Lead Auditor, CISA, CISSP, or equivalent.