About the Company

Isomorphic Labs (IsoLabs) was founded in 2021 and is led by Sir Demis Hassabis. Our aim is to usher in a new era of biomedical breakthroughs and find cures for some of humanity’s devastating diseases.

Our foundations are built on the success of Google DeepMind’s AlphaFold, and we are continuing to develop and implement state-of-the-art technologies to dramatically accelerate and improve the process of designing and bringing new medicines to patients.

We have built a world-leading drug design engine comprising foundational AI models capable of working across multiple therapeutic areas and drug modalities. The company continually innovates on model architecture and develops cutting-edge capabilities to advance rational drug design.

About the Role

Job Title: InfoSec Risk and Governance Lead
Location: London, England, United Kingdom
Employment Type: Full-time
Department: Information Security

Your Impact

As the Information Security Risk and Governance Lead, you will:

• Architect and evolve our security governance framework underpinning our scientific breakthroughs.
• Report directly to the CISO, aligning our data management and security strategy with a complex regulatory landscape.
• Foster a culture of security accountability and risk-informed decision-making.

What You Will Do

• Architect and operationalise a unified compliance framework spanning Drug Discovery and Development, AI, and Cyber regulatory landscapes.
• Own the strategic programme to achieve and maintain ISO 27001 certification for our Information Security Management System (ISMS).

Skills and Qualifications

Essential:

• Ability to excel as an individual contributor with agility to pivot from strategic risk planning to collaborative implementation.
• Knowledge of security and compliance standards across InfoSec (e.g., ISO 27001, NIST, HITRUST), life sciences (e.g., GxP, 21 CFR), and privacy domains (GDPR, HIPAA).

Nice to Have:

• Experience building and operating a Trusted Research Environment and/or Trusted ML Environments.
• Familiarity with AI-specific threats and security controls.
• Relevant certifications (e.g., CISM, CISA, CISSP, ISO 27001 Lead Implementer/Auditor).
• Experience using modern GRC platforms or scripting to automate evidence collection.

Culture and Values

• Thoughtful: Curiosity, creativity, and care in rigorous science.
• Brave: Fearlessness, initiative, and integrity in facing challenges.
• Determined: Confidence and agility in pursuing our goals.
• Together: Connection and collaboration across fields for impactful transformation.

Hybrid Working

We follow a hybrid model, requiring in-office presence 3 days a week (currently Tuesday, Wednesday, and one other day). We are open to discussing accommodations for those with additional needs.