MasterControl

Lead enterprise security strategy, risk management, AI governance, incident response, and compliance assurance at executive level. | 8-10 years security leadership with cloud and AI governance expertise, plus deep compliance framework knowledge and cross-regional data privacy experience. | About MasterControl MasterControl Inc. is a leading cloud-based quality and compliance software provider for life sciences and other regulated industries. Our mission is to enable our customers to bring life-changing products to market faster while ensuring compliance and quality throughout the product lifecycle. We are committed to innovation, customer success, and making a positive impact on the world. SUMMARY We are looking for a Chief Information Security Officer, reporting to the CTO, to own our enterprise security strategy and risk program, including the security and governance of AI use across our engineering organization. You'll be the executive owner of risk assessment, security governance, and incident response, and a close partner to Sales, Customer Success, and Compliance when customer security reviews or due diligence conversations need executive-level backing. This is not a primarily customer-facing role, but you should be comfortable stepping into a customer conversation when a deal or renewal calls for it. WHY THIS ROLE MATTERS Our customers trust us with sensitive data in a highly regulated industry, and much of our customer base is in life sciences — where a security or privacy failure doesn't just cost a deal, it can jeopardize a customer's own regulatory standing (GxP, FDA-regulated processes, clinical and quality data). Security and data governance are not back-office functions here; they are part of the product's value proposition and a precondition for enterprise and government customers to say yes. We also operate infrastructure across multiple regions, which means data privacy and residency obligations - including GDPR and other cross-regional requirements — are a standing part of the job, not a one-time compliance exercise. This role will shape how confidently we can expand into new regions and regulated verticals, and how well we protect the trust we've already built with existing customers. RESPONSIBILITIES Cybersecurity Strategy & Governance Define and execute the company's enterprise security strategy, aligned with business objectives and compliance obligations (including FedRAMP). Own security governance, policies, standards, and risk management practices across the organization. Embed security-by-design principles across systems, applications, cloud infrastructure, and engineering workflows. Set policy for access control, data protection, and secure development practices, partnering with Engineering to embed requirements into the SDLC without becoming a bottleneck. Own data privacy and residency requirements across the regions where we operate infrastructure, including GDPR and other applicable cross-regional obligations. AI Security & Governance Own the security and governance model for how AI and LLM tooling are used across engineering — controlling what data can reach which models and keeping regulated data inside trusted boundaries. Implement guardrails for AI and agentic workflows to catch data leakage, prompt injection, and unsafe outputs before they reach production or customers. Partner with Engineering leadership to make security a built-in part of our AI-driven SDLC tooling, not a gate bolted on afterward. Evaluate and, where appropriate, pursue recognized AI governance frameworks (e.g., ISO 42001) to give customers confidence in how we govern AI use. Help turn our AI security posture into a competitive advantage in customer conversations, in partnership with Sales and Compliance. Risk Assessment & Management Own the enterprise risk assessment program: identify, quantify, and track risk across infrastructure, applications, vendors, and third parties. Run and continuously improve a formal risk register with clear ownership, remediation timelines, and executive reporting. Lead risk assessments for cloud infrastructure and key third-party dependencies (e.g., AWS, Azure), and for new products, features, or architecture changes before launch. Translate technical risk into business terms for executive reporting. Customer Security Support & Compliance Support Sales and Customer Success in customer security conversations, questionnaires, and due diligence reviews — working closely with the Compliance team, who own the customer relationship. Maintain and mature our compliance posture (e.g., FedRAMP, SOC 2, ISO 27001 as applicable) in partnership with Compliance/Validation. Contribute to customer-facing security collateral (architecture summaries, trust documentation) that scales beyond 1:1 conversations. Be available for direct customer engagement when a deal or renewal requires executive-level security assurance. Incident Response & Operational Security Own the cybersecurity incident response program: detection, escalation, communication, and remediation. Lead cross-functional incident response involving Legal, Engineering, and executive leadership as needed. Ensure continuous monitoring, threat intelligence integration, penetration testing, and vulnerability management. Mature our detection and response capability (SIEM, monitoring, managed detection/response) to steadily reduce mean-time-to-detect. Drive post-incident reviews and continuous improvement. Leadership Build, lead, and develop the security team (or oversee the security function, depending on current staffing). Represent security at the executive/leadership table; advise the CEO/CTO on risk posture and security investment priorities. Set and manage the security budget and tooling stack. REQUIRED SKILLS 8-10 years in security leadership, with direct experience owning risk assessment programs (enterprise, product, and/or third-party risk). Hands-on experience securing cloud environments on AWS and/or Azure. Experience governing the security of AI/LLM usage — data boundaries, guardrails against prompt injection and data leakage, and secure use of AI in engineering workflows. Deep working knowledge of at least one major compliance framework (FedRAMP, SOC 2, ISO 27001, or similar). Experience with data privacy and cross-regional compliance requirements (e.g., GDPR) for organizations operating infrastructure in multiple regions. Experience building or maturing a formal risk register and executive risk reporting. Strong written and verbal communication — able to translate technical security concepts for customers and executives, and to work cross-functionally with Sales, Compliance, and Engineering. Track record of leading incident response for a SaaS or cloud-based product. PREFERRED QUALIFICATIONS Prior experience at a company servicing regulated or security-conscious enterprise/government customers. Experience in life sciences or another regulated vertical with GxP, FDA, or similar quality/regulatory FedRAMP compliance or authorization experience. Experience pursuing or maintaining ISO 42001 or similar AI governance certification. Experience partnering with Sales/Customer Success/Compliance as a named security resource in customer due diligence. Relevant certifications (CISSP, CISM, CRISC, or equivalent) PHYSICAL DEMANDS AND WORKING CONDITIONS Ability to operate a computer and work at a desk for extended periods of time Ability to communicate effectively in writing, in person, over the telephone, and in e-mail Ability to work occasional overtime and travel depending on the organization's needs #WhyWorkAnywhereElse? MasterControl is a place where Exceptional Teams come together to do their best work. In fact, hiring Exceptional Teams is a core value of ours. MasterControl employees are surrounded by intelligent, motivated, and collaborative individuals. We like to call it #TheBestTeamOnThePlanet. We work hard to develop and challenge our employees' skillsets, recognize their contributions, encourage professional development, and offer a one-of-a-kind culture. This is why we say #WhyWorkAnywhereElse? MasterControl could be your next (and last) career move! Here are some of the benefits MasterControl employees enjoy: Competitive compensation 100% medical premium coverage (yes, you read that right!) 401(k) plan with company match Generous PTO packages that increase with tenure Schedule flexibility Onsite physician and massage therapist Dental/vision plans Employer-paid life insurance policy Much, much more! Applicants must be currently authorized to work in the United States on a full-time basis. MasterControl is an Equal Opportunity Employer. If you are an individual with a disability and require a reasonable accommodation to complete any part of the application process, or are limited in the ability or unable to access or use this online application process and need an alternative method for applying, you may contact MCTalent@MasterControl.com or call (801) 942-4000 and ask to speak with a member of Human Resources. Equal Opportunity Employer, including disability and protected veteran status

Lead design and development of cloud-native SaaS applications, define software architectures, mentor developers, and collaborate cross-functionally to ensure scalable, reliable, and secure cloud solutions. | 10+ years large-scale software development with recent Java coding experience, 5+ years software architect experience, expertise in cloud platforms (AWS/Azure/GCP), and strong knowledge of software engineering best practices. | About MasterControl: MasterControl Inc. is a leading provider of cloud-based quality and compliance software for life sciences and other regulated industries. Our mission is the same as that of our customers to bring life-changing products to more people sooner. The MasterControl Platform helps organizations digitize, automate and connect quality and compliance processes across the regulated product development life cycle. Over 1,000 companies worldwide rely on MasterControl solutions to achieve new levels of operational excellence across product development, clinical trials, regulatory affairs, quality management, supply chain, manufacturing and postmarket surveillance. For more information, visit www.mastercontrol.com. Summary MasterControl is looking for a passionate and highly motivated Cloud Software Architect to lead the design and development of cloud-native SaaS applications. This role is responsible for defining end-to-end software architectures, ensuring scalability, reliability, and security in our cloud-based platform. The ideal candidate has deep expertise in software architecture and cloud-native application design, with a focus on microservices, API integration, and scalable software patterns. This position requires hands-on software engineering experience and the ability to collaborate closely with development teams in order to translate business requirements into complex cloud solutions. (This role is NOT a Solutions Architect or DevOps Engineer position. It is a software-focused role responsible for defining application architectures, collaborating with engineering teams, and ensuring optimal software performance in cloud environments.) This position reports to the VP of Engineering within the Chief Technology Officer (CTO) organization. Responsibilities • Partner with other architects to develop software architectures/designs that are in line with the MasterControl architectural vision and review alternative solutions for best fit. • Provide technical leadership and mentorship to developers, ensuring consistency in software patterns and architectural decisions. • Work cross-functionally with product teams, DevOps, and platform teams to ensure seamless software deployment and operations. • Provide broad technical and functional knowledge of key technologies and platforms. • Prepare and maintain technical design documentation, diagrams, and detailed project plans. • Focus on the evaluation, design, customization, and optimization of our Cloud-based SaaS solutions. Work with various groups to pursue and deliver solutions that will bring our strategy and products to life. • Develop Architecture/Designs/Automation Plans and lead planning and development for SaaS cloud solutions. • Work with feature teams regularly to provide guidance, and technical direction, and remove roadblocks. • Expertise in architecting and developing highly reliable, fault-tolerant distributed applications with a focus on performance and scale. • Drive a Data-First approach thru integrating data and technical system enhancements. Core Competencies • Deep expertise in cloud-native application design (microservices, serverless, event-driven systems, etc). • Strong API development skills: RESTful APIs, OpenAPI/Swagger, JSON, YAML, etc. • AWS Services, including S3, SQS, SNS, EC2, Route53, IAM, and CLI. • SQL/NoSQL Databases for example SQL Server, Mongo, AWS RDS, DynamoDB, and DocumentDB. • Familiarity with containerized application development (Kubernetes, AWS ECS, and AWS EKS). • Practical knowledge of a broad range of information technology domains including server virtualization, storage systems, application delivery systems, networking, security, software development, process automation, authentication, and authorization systems. Basic Qualifications • Hands-on experience architecting highly available systems that utilize load balancing, horizontal scalability, and high availability. • BS level technical degree in Computer Science (MS preferred). • 10+ years of large-scale software development or application engineering with recent coding experience in languages such as Java. • Minimum 5 years of software architect experience with end-to-end platforms, Cloud and Data architectures, and SOA systems. • Demonstrated experience using application integration or SOA design patterns and a working knowledge of the cloud architecture and building product solutions in one or more of the following cloud providers (AWS, Azure, GCP) with a focus on operational stability and flexibility. • Strong understanding of software engineering best practices, CI/CD pipelines, and DevOps collaboration in cloud environments. • Deep experience working in vertical software stacks. Why Work Here? #WhyWorkAnywhereElse? MasterControl is a place where Exceptional Teams come together to do their best work. In fact, hiring Exceptional Teams is a core value of ours. MasterControl employees are surrounded by intelligent, motivated, and collaborative individuals. We like to call it #TheBestTeamOnThePlanet. We work hard to develop and challenge our employees' skillsets, recognize their contributions, encourage professional development, and offer a one-of-a-kind culture. This is why we say #WhyWorkAnywhereElse? MasterControl could be your next (and last) career move! Here are some of the benefits MasterControl employees enjoy: • Competitive compensation • 100% medical premium coverage (yes, you read that right!) • 401(k) plan with company match • Generous PTO packages that increase with tenure • Schedule flexibility • Fitness clubs (you get paid to have fun and be active!) • Company parties and employee recognition programs • Wellness programs (free Fitbit, gym membership and athletic shoe reimbursements, etc.) • Onsite physician and massage therapist • Innovation center and gaming rooms at the office • Dental/vision plans • Employer paid life insurance policy • Much, much more! Applicants must be currently authorized to work in the United States on a full-time basis. The US base salary range for this full-time position is $200,000-$250,000 + equity + benefits. Our salary ranges are determined by role, level, and location. The range displayed on each job posting reflects the minimum and maximum target for new hire salaries for the position across all US locations. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training. Your recruiter can share more about the specific salary range for your preferred location during the hiring process. MasterControl is an Equal Opportunity Employer. If you are an individual with a disability and require a reasonable accommodation to complete any part of the application process, or are limited in the ability or unable to access or use this online application process and need an alternative method for applying, you may contact MCTalent@MasterControl.com or call (801) 942-4000 and ask to speak with a member of Human Resources. Equal Opportunity Employer, including disability and protected veteran status.