Who We Are

Flagship Pioneering is a scientific innovation engine that invents and builds companies that change the world. We bring together the greatest scientific minds with entrepreneurial company builders and assemble the capital to allow them to take courageous leaps in human health, sustainability, and beyond. 

What sets Flagship apart is our ability to advance biotechnology by uniting life science innovation, company creation, and capital investment under one roof in a way that is largely without precedent. Our team of scientists, entrepreneurial leaders, and professional capital managers are each aligned around an institutionalized process that enables us to innovate and create breakthroughs for the benefit of people and planet.

Many of the companies Flagship has founded have addressed humanity’s most urgent challenges: vaccinating billions of people against COVID-19, curing intractable diseases, improving human health, preempting illness, and feeding the world by improving the resiliency and sustainability of agriculture.

Flagship has been recognized twice on FORTUNE’s “Change the World” list, an annual ranking of companies that have made a positive social and environmental impact through activities that are part of their core business strategies, and has been named four times to Fast Company’s annual list of the World’s Most Innovative Companies.

About the Role

Flagship's GRC program has matured from build to operate. We have a functioning GRC system of record in Jira, active compliance tracks across HITRUST, NIST 800-171, ISO 27001, and SOC 2, and a TPRM workflow in production. What we need now is a hands-on practitioner who can execute against that infrastructure — someone who is as comfortable running a vendor risk assessment in Jira as they are prepping evidence packages for an audit. This is not a policy-writing or director-level role. It is a technical execution role for someone who gets things done.

What You'll Do

• Own day-to-day execution of the GRC system of record in Jira — maintaining control records, updating compliance status, logging implementation and auditor notes, and keeping the SOR current across all active frameworks
• Run TPRM assessments end-to-end: intake, questionnaire review, risk scoring, CISO decision documentation, and post-approval tracking
• Coordinate audit evidence collection and control testing activities across HITRUST, ISO 27001, SOC 2, and NIST 800-171 frameworks, working directly with the external audit firm
• Maintain the compliance calendar and drive sprint-by-sprint execution against framework deadlines
• Manage sub-processor and DPA tracking for portfolio company privacy programs, including gap identification and remediation follow-up
• Support DSR and privacy program operations, including data inventory maintenance and deletion workflow tracking
• Build and maintain GRC automation using AI tools (Claude, Jira automation, Zapier) to reduce manual burden on recurring compliance tasks
• Produce clear, accurate reporting on compliance posture for the CISO and cross-functional stakeholders

What We're Looking For

• 3–6 years of hands-on GRC experience, ideally in a fast-moving tech or life sciences environment
• Direct experience working in Jira as a compliance or GRC tool — not just a project management tool; you should understand issue types, custom fields, bulk operations, and reporting
• Working knowledge of at least two of: HITRUST CSF, ISO 27001, NIST 800-171/CMMC, SOC 2, HIPAA
• Experience running vendor risk assessments — intake to decision — not just filling out questionnaires
• Comfort with AI-assisted work: you should already be using tools like Claude or ChatGPT to accelerate your GRC work, not learning to do so for the first time
• Strong written communication — you'll be producing evidence narratives, audit responses, and control documentation that external auditors and regulators will read
• Ability to operate with high autonomy; the CISO will provide direction but not day-to-day supervision

Nice to Have

• CISA, CRISC, CISM, or equivalent certification
• Experience with privacy program operations (CCPA, GDPR, DSR workflows)
• Familiarity with Drata, Vanta, or similar compliance automation platforms
• Experience supporting a portfolio company or multi-entity compliance program

Why This Role

You'll own a real compliance program, not support someone else's. The CISO is your direct partner, not a distant approver. You'll use modern tools — Jira, Claude, Zapier — to do GRC work that most teams still do in spreadsheets. And you'll have visibility into a genuinely diverse security environment spanning drug discovery AI, clinical platforms, and life sciences infrastructure.

We are an equal opportunity employer. All qualified applicants will be considered for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other characteristic protected by law. 

We recognize that great candidates often bring unique strengths without fulfilling every qualification. If you have some of the experience listed above but not all, please apply anyway. We are dedicated to building diverse and inclusive teams and look forward to learning more about your background and interest in Flagship. 

Recruitment & Staffing Agencies: Flagship Pioneering and its affiliated Flagship Lab companies (collectively, “FSP”) do not accept unsolicited resumes from any source other than candidates. The submission of unsolicited resumes by recruitment or staffing agencies to FSP or its employees is strictly prohibited unless contacted directly by Flagship Pioneering’s internal Talent Acquisition team. Any resume submitted by an agency in the absence of a signed agreement will automatically become the property of FSP, and FSP will not owe any referral or other fees with respect thereto. 

#LI-NM1 

The salary range for this role is $88,000 - $121,000. Compensation for the role will depend on a number of factors, including a candidate’s qualifications, skills, competencies, and experience. Flagship Pioneering currently offers healthcare coverage, annual incentive program, retirement benefits and a broad range of other benefits. Compensation and benefits information is based on Flagship Pioneering's good faith estimate as of the date of publication and may be modified in the future.

BioMed Realty is seeking a dynamic, strategic, highly motivated Senior Analyst, Investments and Asset Management to provide analytical and decision support, including investment underwriting and financial analysis across acquisitions, dispositions, development, redevelopment, leasing, and restructurings, as well as transactional due diligence for potential real estate investment opportunities, management of existing assets, and identification of creative growth opportunities.

What You’ll Do

• Run a comprehensive underwriting process, including creation of detailed financial models (Excel and ARGUS), development of market assumptions, and analyses supporting Investments and Asset Management activities, capital markets, and other strategic capital allocation opportunities to enhance asset value and performance.
• Identify growth opportunities and recommend strategies using knowledge of market trends, financial data, and industry benchmarks.
• Contribute to the preparation of investment presentations for the Investment Committee.
• Prepare ad hoc analyses and industry research in support of potential investment, leasing, or development opportunities.
• Support the transactional due diligence process and manage communication with counterparties.
• Collaborate cross-functionally with legal, accounting, leasing, development, finance, and operations teams to aggregate, interpret, and communicate information for internal and external stakeholders.
• Prepare comprehensive business plans for assets, outlining key initiatives, alternative strategies, and financial projections.
• Conduct diligence to assess operating performance, utilization, capital expenditure needs, and competitive positioning; evaluate strategic importance, risk factors, and financial feasibility of assets.
• Contribute to reports, presentations, and recommendations for senior management and the executive team.
• Manage and track timelines for strategic plans, including key milestones, intermediate decisions, and deliverables.
• Provide additional support to the Investments and Asset Management team as needed.
• Leverage AI tools to streamline workflows and deliver timely, accurate, and efficient analytics; prior experience with AI is a plus.

What You Bring

• Bachelor’s degree in finance, real estate, or a related technical field, with demonstrated experience in commercial real estate, corporate finance, private equity, or investment banking, and a proven ability to quickly step into the role and operate with a high degree of independence.
• Advanced financial modeling expertise, with proven experience in commercial real estate transactions and a strong understanding of real estate fundamentals.
• Life sciences industry experience is a plus.
• Proven ability to analyze financial statements, leases, and related documents for forecasting, underwriting, and tenant credit analysis.

Competencies Critical for Success

• Tool/Software Literacy – Advanced proficiency in Microsoft Excel, PowerPoint, and ARGUS.
• Data Gathering and Analysis – Ability to collect, consolidate, and analyze relevant information; identify patterns, diagnose issues, and develop practical solutions.
• Attention to Detail – Applies a thorough and detail-oriented approach to all work.
• AI Mindset – Demonstrates a growth mindset and willingness to adopt and apply AI tools to enhance team effectiveness and workflows.
• Quality Orientation – Sets high standards for work quality and continuously seeks improvement.
• Problem Solving – Identifies and resolves complex issues with limited guidance.
• Conceptual Thinking – Synthesizes multiple sources of information to identify key issues in complex situations.
• Teamwork – Contributes effectively as part of a collaborative, high-performing team.
• Oral Communication – Communicates ideas clearly and effectively.
• Written Communication – Produces clear, well-structured, and professional written materials.
• Continuous Learning – Actively seeks feedback and pursues ongoing development.
• Initiative – Proactively identifies opportunities and takes action.
• Results Orientation – Demonstrates persistence and accountability in achieving measurable outcomes.
• Professional Confidence – Demonstrates confidence in one’s abilities while remaining open to feedback; communicates effectively, exercises sound judgment, and handles challenges constructively.

Salary: $97,000 - $120,000 per year + bonus + long term incentive + benefits

The above represents the expected salary range for this job requisition. Ultimately, in determining pay, we’ll consider location, experience, and other job-related factors.

Benefits 

At BioMed Realty, we make sure you have the support and resources to leverage and develop your skills, secure your financial future, and take care of your health and well-being. BioMed Realty continually seeks to provide a workplace where everyone can be their authentic self. Through BioMed Realty’s competitive benefits offerings and various training and development opportunities, we have you covered with our Benefits Program which includes:

• Medical, Dental, and Vision Insurance
• Paid Time Off and Paid Family Leave Benefits
• 401(k) Retirement Savings Plan
• Tuition Reimbursement
• Flexible Spending Accounts
• Commuter Benefits
• Lifestyle Spending Account
• Pet Insurance
• ID Theft Insurance
• Legal Insurance
• Employee Assistance Program
• 100% Employer-Paid Life & AD&D Insurance, Short and Long Term Disability

Amenities  

• Offsite Gym
• Complimentary Snacks and Beverages 
• Offsite parking

Notice to Recruiters and Third-Party Agencies 

The Talent Acquisition team manages the recruitment and hiring process to ensure a consistent and equitable experience for all parties. We only accept resumes from agencies with a fully executed search agreement in place. Agencies are not authorized to contact BioMed Realty employees directly to present candidates. Any unsolicited resumes submitted without a prior agreement will be considered referrals and will not incur any fees or obligations.

#LI-EW1

Warning: Fraudulent Job Adverts Beware of fraudulent activities claiming to represent Insurify. We are not associated with any entities soliciting personal information or payment. The safety of our job seekers is a top priority, and we actively work to prevent such incidents. Insurify will never request sensitive information or payment during the hiring process. Be cautious of text-only interviews, interviews conducted through Microsoft Teams, or suspicious offer letters. 

Why us? 

Insurify is one of America’s fastest-growing MIT FinTech startups and has been recognized as one of Inc. 5,000’s fastest-growing private companies in America in 2025, 2024, 2023, 2022 and 2021, Forbes Fintech 50 List for 2023, 2022, and 2021, Forbes Next Billion Dollar Startups of 2022 global and Top 100 InsurTech company. We’re changing the way millions of people compare, buy and manage insurance with artificial intelligence, technology, and superior product design.

Our company vision is to be recognized as the preeminent and most trusted digital agent for insurance comparison, purchase, and management. Our team is critical to achieving our vision and fostering the right culture is essential to our team’s success.

Join us if you like

• $1.3 Trillion market opportunity
• MIT alumni founders
• Female-led startup
• $130M total funding
• Strong leadership team with experience from many successful startups around the world

Insurify is hiring a Senior Security and Compliance Analyst to help design and enforce security controls to protect systems, data, and infrastructure while ensuring alignment with regulatory and industry standards. This role will be working cross functionally across the org on long-term projects as Insurify continues to scale.

This is a hybrid position that requires candidates to be able to come into our Cambridge, MA office.

How you will make an impact

• Align security practices with external regulations, internal policies, and security frameworks (e.g., NIST CSF, PCI).
• Conduct risk assessments and threat/vulnerability analyses across systems and networks.
• Recommend, implement, and validate security controls and best practices to reduce risk.
• Continuously monitor systems for threats and validate the effectiveness of implemented controls.
• Develop, maintain, and socialize security policies, standards, and procedures. 
• Develop incident response planning and manage post-incident reviews.
• Maintain the security and compliance automation platform.
• Monitor evolving threats, regulations, and industry trends to continually enhance the security program.
• Present findings and recommendations to technical and executive stakeholders.

Who you are

• Associate's or bachelor's degree in computer science or a related field.
• 3+ years of relevant experience.
• Expertise with enterprise IT, cloud infrastructure, common threats, and core security tools.
• Working knowledge of frameworks such as NIST CSF and PCI for risk and capability mapping.
• Understanding of data privacy laws and industry-specific regulations.
• Clear, concise communication of complex technical risk to both technical and executive audiences.

Benefits

• Competitive compensation
• Generous stock options
• Health, Dental Coverages
• 401K plan with match
• Unlimited PTO
• Generous company holiday calendar
• Learning & Development Stipends
• Paid Family Leave
• Social impact volunteer time 
• Catered lunches in the office

Insurify is committed to offering a fair, competitive, and transparent compensation program that supports our mission to attract, retain, and motivate top talent. Our compensation philosophy is guided by several factors including a candidate’s relevant experience, education/training, job-related skills, and location.

In addition to the base salary our total compensation package includes health coverage, retirement contributions, and additional wellbeing benefits. Some positions may be eligible for company equity.

Below is the base compensation range for US locations:

$110,000-$115,000