# Chief Information Security Officer (CISO) at MasterControl

- Company: MasterControl
- What the company does: MasterControl’s modern MES and QMS ensure compliance with regulations, reduce risks, and improve the quality and safety of products for regulated industries like Life Sciences.
- Company website: https://www.mastercontrol.com
- Type: Startups
- Level: Principal and up
- Location: Salt Lake City (Hybrid)
- Work setup: Hybrid
- Posted: 2026-07-21
- Apply by: 2026-10-08
- Apply: https://www.mastercontrol.com/careers/job-listings/role/?role=4717122005&gh_jid=4717122005
- Page: https://www.1752.vc/careers/jobs/mastercontrol-chief-information-security-officer-ciso/

## About the role

We are looking for a Chief Information Security Officer, reporting to the CTO, to own our enterprise security strategy and risk program, including the security and governance of AI use across our engineering organization. You'll be the executive owner of risk assessment, security governance, and incident response, and a close partner to Sales, Customer Success, and Compliance when customer security reviews or due diligence conversations need executive-level backing.

## What they're looking for

- Define and execute the company's enterprise security strategy, aligned with business objectives and compliance obligations (including FedRAMP)
- Own security governance, policies, standards, and risk management practices across the organization
- Embed security-by-design principles across systems, applications, cloud infrastructure, and engineering workflows
- Set policy for access control, data protection, and secure development practices, partnering with Engineering to embed requirements into the SDLC without becoming a bottleneck
- Own data privacy and residency requirements across the regions where we operate infrastructure, including GDPR and other applicable cross-regional obligations
- Own the security and governance model for how AI and LLM tooling are used across engineering — controlling what data can reach which models and keeping regulated data inside trusted boundaries

Tags: Security