IT, Cybersecurity Risk and Regulatory Analyst

Castle Biosciences Inc. is growing, and we are looking to hire a full-time Cyber Security Risk and Regulatory Analyst working from our headquarters in Friendswood, TX, with a start date on or before October 1, 2026.

About Castle Biosciences Inc.

At Castle, it all comes down to people. After all, disease doesn't just happen—it happens to people. We believe that disease management and treatment decisions can be better informed through a person's unique biology, which is revealed through the scientific rigor of our innovative, laboratory-developed tests. We are committed to empowering healthcare providers and patients with the goal of improved outcomes.

Every employee at Castle has an impact on patient care, and we work to ensure that everyone finds their work to be both challenging and rewarding. We behave with integrity and treat our colleagues with respect and kindness. Our culture fosters an environment of trust, transparency, and collaboration. We prioritize and encourage internal growth and professional development.

Why Castle Biosciences?

• Exceptional Benefits Package
• Excellent Annual Salary + 20% Bonus Potential
• 20 Accrued PTO Days Annually + 10 Paid Holidays
• 401K with 100% Company Match up to 6%
• 3 Health Care Plan Options + Company HSA Contribution
• Company Stock Grant Upon Hire

A Day in the Life of the Cybersecurity Risk and Regulatory Analyst

In this role, you'll serve as a key contributor to Castle Biosciences' cybersecurity risk and compliance efforts. Your day may include supporting FDA cybersecurity submissions, partnering with cross-functional teams to maintain SOC 2 compliance, monitoring security controls, and communicating risk insights to leadership and business stakeholders. You'll play an important role in ensuring our products and operations meet regulatory requirements while helping strengthen the organization's overall security posture.

Responsibilities

• Support FDA cybersecurity submissions
• Partner with cross-functional teams to maintain SOC 2 compliance
• Monitor security controls
• Communicate risk insights to leadership and business stakeholders

Requirements

• Bachelor's degree in Cybersecurity, Information Systems, Computer Science, or related field, or equivalent experience
• 2+ years' experience with FDA cybersecurity guidance for medical devices, including premarket submissions, Secure Product Development Framework (SPDF), and SBOM requirements
• 2+ years' direct experience supporting SOC 2 Type I/II audits, including control design and evidence management
• Familiarity with risk management frameworks such as NIST CSF, NIST 800-30, or ISO 27001/27005

Benefits

• Excellent annual salary + 20% bonus potential
• 20 accrued PTO days annually + 10 paid holidays
• 401K with 100% company match up to 6%
• 3 health care plan options + company HSA contribution
• Company stock grant upon hire

Schedule

On site working from Friendswood, TX headquarters. Full-time, exempt. Standard business hours with flexibility as needed to support audit deadlines and regulatory submission timelines.

Work Authorization

All candidates must be legally authorized to work in the United States. Currently, Castle Biosciences does not sponsor H-1B visas, OPT, or employment-related visas.