Head of Security, IT

This is a fully remote position, open to applicants in New York.

📋 Description

• Take charge of Allium's security strategy, prioritize significant risks, and implement controls with designated ownership.

• Communicate security advancements, unresolved vulnerabilities, and decisions that require leadership input.

• Set security benchmarks for AI agent identities, tool permissions, credentials, isolation, data access, and logging practices.

• Assess coding assistants, model gateways, and integrations for prompt injection, tool misuse, and unintended actions.

• Manage employee IT and workforce security across devices, identities, cloud environments, and essential SaaS applications.

• Develop onboarding and offboarding procedures, monitor exceptions, appoint remediation owners, and outline IT support delivery.

• Enhance controls for cloud, software, credentials, privileged access, secure development, CI/CD, and software supply chains.

• Create integrated programs for detection, response, containment, credential revocation, and recovery.

• Monitor services accessible via the internet, evaluate ongoing threats and exploitation, and coordinate mitigation efforts.

• Oversee audits, customer security evaluations, vendor assessments, and technical evidence collection.

• Choose and manage security and IT tools and providers, automate repetitive tasks, and assist in team development.

• Leverage AI to enhance security and IT operations while ensuring proper safeguards and validation.

⛳️ Requirements

• Typically possess 6+ years of relevant experience in security engineering, infrastructure security, or corporate security.

• Proven track record of independently driving substantial security enhancements.

• Recent practical experience in implementing controls within cloud-based environments.

• Capability to investigate technical issues and collaborate effectively with production system engineers.

• In-depth knowledge in identity, cloud or application security, detection and response, endpoint security, or software supply chain security.

• Experience in establishing or advancing a security program at a growing technology firm.

• Sound judgment regarding AI-driven tools, access controls, behavior validation, and output validation.

• Effective communication skills with engineers, business leaders, customers, and providers.

• Beneficial experience in enterprise SaaS, data infrastructure, fintech, or organizations with stringent security needs.

• Valuable experience in securing AI agents, developer tools, CI/CD, non-human identities, or third-party integrations.

• Relevant experience with SOC 2, customer assurance, vendor security evaluations, or external security and IT service providers.

• Application must include location and U.S. work eligibility information; visa sponsorship status is requested.

🏝️ Benefits

• Medical, Dental, Vision, Life, and AD&D insurance; employees in the U.S. receive 100% coverage for Gold plans and 80% for dependents.

• Meaningful early-stage equity; every full-time employee is granted stock options.

• Flexible, trust-based paid time off policy.

• Time-off policies comply with or exceed local statutory vacation requirements in all hiring countries.

• Company-sponsored 401(k) plan available in the U.S.

• Option for remote work.