--- title: 'Chief Information Security Officer (CISO) at MasterControl' canonical: 'https://feeny.ai/job/chief-information-security-officer-ciso-mastercontrol-salt-lake-city-te29mkj59n1w' type: 'job' last_seen: '2026-09-14' --- # Chief Information Security Officer (CISO) at MasterControl - **Company:** MasterControl - **Location:** Salt Lake City, UT - **Work type:** hybrid - **Posted:** 2026-07-21 - **Last confirmed live:** 2026-09-14 - **Apply:** https://www.mastercontrol.com/careers/job-listings/role/?role=4717122005&gh_jid=4717122005 ## Job description ## About MasterControl MasterControl Inc. is a leading cloud-based quality and compliance software provider for life sciences and other regulated industries. Our mission is to enable our customers to bring life-changing products to market faster while ensuring compliance and quality throughout the product lifecycle. We are committed to innovation, customer success, and making a positive impact on the world. ## SUMMARY We are looking for a Chief Information Security Officer, reporting to the CTO, to own our enterprise security strategy and risk program, including the security and governance of AI use across our engineering organization. You'll be the executive owner of risk assessment, security governance, and incident response, and a close partner to Sales, Customer Success, and Compliance when customer security reviews or due diligence conversations need executive-level backing. This is not a primarily customer-facing role, but you should be comfortable stepping into a customer conversation when a deal or renewal calls for it. ## WHY THIS ROLE MATTERS Our customers trust us with sensitive data in a highly regulated industry, and much of our customer base is in life sciences — where a security or privacy failure doesn't just cost a deal, it can jeopardize a customer's own regulatory standing (GxP, FDA-regulated processes, clinical and quality data). Security and data governance are not back-office functions here; they are part of the product's value proposition and a precondition for enterprise and government customers to say yes. We also operate infrastructure across multiple regions, which means data privacy and residency obligations - including GDPR and other cross-regional requirements — are a standing part of the job, not a one-time compliance exercise. This role will shape how confidently we can expand into new regions and regulated verticals, and how well we protect the trust we've already built with existing customers. ## RESPONSIBILITIES Cybersecurity Strategy & Governance - Define and execute the company's enterprise security strategy, aligned with business objectives and compliance obligations (including FedRAMP). - Own security governance, policies, standards, and risk management practices across the organization. - Embed security-by-design principles across systems, applications, cloud infrastructure, and engineering workflows. - Set policy for access control, data protection, and secure development practices, partnering with Engineering to embed requirements into the SDLC without becoming a bottleneck. - Own data privacy and residency requirements across the regions where we operate infrastructure, including GDPR and other applicable cross-regional obligations. AI Security & Governance - Own the security and governance model for how AI and LLM tooling are used across engineering — controlling what data can reach which models and keeping regulated data inside trusted boundaries. - Implement guardrails for AI and agentic workflows to catch data leakage, prompt injection, and unsafe outputs before they reach production or customers. - Partner with Engineering leadership to make security a built-in part of our AI-driven SDLC tooling, not a gate bolted on afterward. - Evaluate and, where appropriate, pursue recognized AI governance frameworks (e.g., ISO 42001) to give customers confidence in how we govern AI use. - Help turn our AI security posture into a competitive advantage in customer conversations, in partnership with Sales and Compliance. Risk Assessment & Management - Own the enterprise risk assessment program: identify, quantify, and track risk across infrastructure, applications, vendors, and third parties. - Run and continuously improve a formal risk register with clear ownership, remediation timelines, and executive reporting. - Lead risk assessments for cloud infrastructure and key third-party dependencies (e.g., AWS, Azure), and for new products, features, or architecture changes before launch. - Translate technical risk into business terms for executive reporting. Customer Security Support & Compliance - Support Sales and Customer Success in customer security conversations, questionnaires, and due diligence reviews — working closely with the Compliance team, who own the customer relationship. - Maintain and mature our compliance posture (e.g., FedRAMP, SOC 2, ISO 27001 as applicable) in partnership with Compliance/Validation. - Contribute to customer-facing security collateral (architecture summaries, trust documentation) that scales beyond 1:1 conversations. - Be available for direct customer engagement when a deal or renewal requires executive-level security assurance. Incident Response & Operational Security - Own the cybersecurity incident response program: detection, escalation, communication, and remediation. - Lead cross-functional incident response involving Legal, Engineering, and executive leadership as needed. - Ensure continuous monitoring, threat intelligence integration, penetration testing, and vulnerability management. - Mature our detection and response capability (SIEM, monitoring, managed detection/response) to steadily reduce mean-time-to-detect. - Drive post-incident reviews and continuous improvement. Leadership - Build, lead, and develop the security team (or oversee the security function, depending on current staffing). - Represent security at the executive/leadership table; advise the CEO/CTO on risk posture and security investment priorities. - Set and manage the security budget and tooling stack. ## REQUIRED SKILLS - 8-10 years in security leadership, with direct experience owning risk assessment programs (enterprise, product, and/or third-party risk). - Hands-on experience securing cloud environments on AWS and/or Azure. - Experience governing the security of AI/LLM usage — data boundaries, guardrails against prompt injection and data leakage, and secure use of AI in engineering workflows. - Deep working knowledge of at least one major compliance framework (FedRAMP, SOC 2, ISO 27001, or similar). - Experience with data privacy and cross-regional compliance requirements (e.g., GDPR) for organizations operating infrastructure in multiple regions. - Experience building or maturing a formal risk register and executive risk reporting. - Strong written and verbal communication — able to translate technical security concepts for customers and executives, and to work cross-functionally with Sales, Compliance, and Engineering. - Track record of leading incident response for a SaaS or cloud-based product. ## PREFERRED QUALIFICATIONS - Prior experience at a company servicing regulated or security-conscious enterprise/government customers. - Experience in life sciences or another regulated vertical with GxP, FDA, or similar quality/regulatory - FedRAMP compliance or authorization experience. - Experience pursuing or maintaining ISO 42001 or similar AI governance certification. - Experience partnering with Sales/Customer Success/Compliance as a named security resource in customer due diligence. - Relevant certifications (CISSP, CISM, CRISC, or equivalent) ## PHYSICAL DEMANDS AND WORKING CONDITIONS - Ability to operate a computer and work at a desk for extended periods of time - Ability to communicate effectively in writing, in person, over the telephone, and in e-mail - Ability to work occasional overtime and travel depending on the organization's needs #WhyWorkAnywhereElse? MasterControl is a place where Exceptional Teams come together to do their best work. In fact, hiring Exceptional Teams is a core value of ours. MasterControl employees are surrounded by intelligent, motivated, and collaborative individuals. We like to call it #TheBestTeamOnThePlanet. We work hard to develop and challenge our employees' skillsets, recognize their contributions, encourage professional development, and offer a one-of-a-kind culture. This is why we say #WhyWorkAnywhereElse? MasterControl could be your next (and last) career move! Here are some of the benefits MasterControl employees enjoy: Competitive compensation 401(k) plan with company match Generous PTO packages Schedule flexibility Dental/vision plans Employer-paid life insurance policy Much, much more! Applicants must be currently authorized to work in the United States on a full-time basis. MasterControl is an Equal Opportunity Employer. If you are an individual with a disability and require a reasonable accommodation to complete any part of the application process, or are limited in the ability or unable to access or use this online application process and need an alternative method for applying, you may contact MCTalent@MasterControl.com or call (801) 942-4000 and ask to speak with a member of Human Resources. Equal Opportunity Employer, including disability and protected veteran status ## About MasterControl ## Company Overview - **One-liner**: MasterControl provides AI-enabled quality, manufacturing, and asset management software for life sciences and other highly regulated industries. - **Entity Type**: Private (Series A, $150M raised in 2022) - **Headquarters**: Salt Lake City, Utah, United States - **Founded**: 1993 - **Founders**: Not publicly available (formerly known as Document Control Systems) ## Core Business - **Primary industry**: Life sciences software (Quality Management Systems, Manufacturing Execution Systems, Asset Management) - **Target customers**: B2B, Enterprise – pharmaceutical, biotech, medical device, nutraceutical, and other regulated manufacturers - **Mission**: To bring life-changing products to more people sooner by helping organizations digitize, automate, and connect quality, manufacturing, and asset management processes. ## Products & Services - **MasterControl Quality Excellence**: AI-driven Quality Management System (QMS) for flexible quality event management, simplified document management, and automated training management. - **MasterControl Manufacturing Excellence (Mx)**: Digital manufacturing platform (MES/EBR) enabling paperless production records, electronic logbooks, and asset management – claims to help deliver products 70% faster. - **MasterControl Asset Excellence (Ax)**: Cloud-based asset management and calibration tools with AI-driven predictive maintenance scheduling. - **MasterControl AI Solutions**: A collection of AI tools specialized for life sciences, certified to ISO 42001, designed to automate manual tasks and identify trends without compromising compliance. ## Market Standing - **Valuation/Market Cap**: Not publicly available (reached unicorn status after the 2022 Series A) - **Key Metric**: Annual Revenue – $125.0M (latest estimate); Total Funding – $150.0M (Series A, December 2022) - **Notable Investors/Partners**: Sixth Street (lead investor in Series A); over 1,200 customers worldwide; operates in 16 countries including UK, Japan, India, Australia, Germany. - **Growth Signals**: 117 new hires in 2024; 25% of new positions filled internally; recently appointed new CEO (David Edwards), CFO (Wynn Clayton), and CSO (Ian Ball); holds 12+ patents; FedRAMP authorization achieved. ## Competitive Advantages - **30-year track record** in life sciences compliance and GxP workflows. - **AI-first platform** purpose-built for regulated industries, not a generic QMS retrofit. - **ISO 42001 certified** AI governance – a differentiator for audit-ready AI adoption. - **End-to-end coverage** from quality to manufacturing to asset management on a single platform. - **Deep domain expertise** with over 1,200 customers including major pharma and med device players. ## Strategic Focus - **Accelerate AI adoption** across quality, manufacturing, and asset workflows while maintaining compliance. - **Expand global sales engine** with new leadership (CFO, CSO) focused on disciplined, sustainable growth. - **Deepen platform integration** to eliminate silos between quality, production, and asset data. - **Continue paperless manufacturing push** to reduce errors and speed time-to-market. ## Why Work Here - **Culture**: Values-driven environment with mentoring programs, leadership training, and over 20 employee activities per year. Emphasis on learning, collaboration, and “work here, stay here” retention. - **Wellness**: 20+ fitness clubs and health/wellbeing programs; Chief Culture Officer focused on wellness initiatives. - **Growth**: 117 new hires in 2024; 25% internal promotion rate; opportunities for career development across technical, sales, and customer-facing roles. - **Remote/Hybrid Policy**: Not publicly available – offices in 8 locations across 4 countries (US, UK, Australia, Japan) suggest a mix of on-site and hybrid roles. - **Recognition**: Named “Best Places to Work” in Utah (2021); featured in Forbes; 3.6/5 employee rating on LinkedIn (253 reviews) with top marks for work-life balance (3.9). - **Engineering Culture**: 30% of employees in technical roles; software engineers report median salary of ~$135K; tools and stack likely modern (cloud, AI, compliance-focused). ## Sources 1. [mastercontrol.com](https://www.mastercontrol.com/) 2. [mastercontrol.com/careers](https://www.mastercontrol.com/careers/) 3. [linkedin.com/company/mastercontrol](https://www.linkedin.com/company/mastercontrol) 4. [cbinsights.com/company/mastercontrol](https://www.cbinsights.com/company/mastercontrol) ## Other roles at MasterControl - [Marketing Events Coordinator](https://feeny.ai/job/marketing-events-coordinator-mastercontrol-salt-lake-city-d2fsvm2pkef4) — Salt Lake City, UT - [Marketing Operations AI Engineer](https://feeny.ai/job/marketing-operations-ai-engineer-mastercontrol-salt-lake-city-2hj5dana9bxh) — Salt Lake City, UT - [Product Marketing Manager - CMMS](https://feeny.ai/job/product-marketing-manager-cmms-mastercontrol-salt-lake-city-39904tppbqjq) — Salt Lake City, UT - [Technical Product Manager](https://feeny.ai/job/technical-product-manager-mastercontrol-salt-lake-city-bcb8grap04ma) — Salt Lake City, UT - [Senior Finance Operations & Site Reliability Engineer](https://feeny.ai/job/senior-finance-operations-site-reliability-engineer-mastercontrol-salt-lake-city-bhnmtbebytz0) — Salt Lake City, UT - [Applied AI Solutions Engineer](https://feeny.ai/job/applied-ai-solutions-engineer-mastercontrol-salt-lake-city-y37zv77rbjrb) — Salt Lake City, UT - [Customer Support Engineer](https://feeny.ai/job/customer-support-engineer-mastercontrol-india-2wzbrm271mcj) — India - [Sales Development Representative](https://feeny.ai/job/sales-development-representative-mastercontrol-salt-lake-city-y5mk3rmc5mk1) — Salt Lake City, UT - [Chief Information Security Officer (CISO)](https://feeny.ai/job/chief-information-security-officer-ciso-spring-health-new-york-ep961qb8qxdj) — New York, NY / San Francisco, CA - [Chief Information Security Officer (CISO)](https://feeny.ai/job/chief-information-security-officer-ciso-obsidian-security-palo-alto-57e8d19hwxmy) — Palo Alto, CA