Head of Information Security & IT

About the Role

We’re looking for a Head of Information Security & IT to lead security strategy for a growing financial technology business. The organization develops cloud-based software used by investment firms to manage data and analyze private market portfolios.

You’ll oversee information security, cloud and application protection, corporate IT, and compliance. This is a hands-on leadership role. You’ll set priorities, guide a small team, and work directly on technical challenges when needed.

The position also has a strong focus on AI security. You’ll help protect sensitive information as new AI tools, agents, and applications become part of everyday business operations.

Key Responsibilities

Security Leadership and Strategy

• Lead the information security program and set its long-term direction.
• Build a security roadmap based on business needs and current risks.
• Manage and mentor senior security, compliance, and IT professionals.
• Review security controls and identify areas that need improvement.
• Explain security risks and priorities to executive leadership.
• Represent the security program in discussions with clients, partners, and auditors.

Cloud and Application Security

• Oversee security across cloud infrastructure and software applications.
• Work with engineering teams to improve secure development practices.
• Lead vulnerability management, threat modeling, and risk-based remediation.
• Review application architecture and identify potential security weaknesses.
• Evaluate security tools and implement controls when needed.
• Build proofs of concept to test new security approaches.

AI Security and Emerging Threats

• Develop security standards for AI tools used by employees and customers.
• Protect sensitive information shared with AI models and external services.
• Set controls for AI agents, integrations, and automated actions.
• Assess risks such as prompt injection, data leaks, and unsafe tool access.
• Monitor new threats involving AI-powered attacks and software supply chains.
• Evaluate AI-based security tools that could improve threat detection or response.

Corporate IT and Threat Response

• Oversee security monitoring, threat detection, and incident response.
• Guide the use of SIEM, EDR, WAF, and DLP technologies.
• Improve alert handling through automation and better security workflows.
• Set security standards for employee devices, accounts, and access permissions.
• Oversee identity and endpoint security while the IT team manages daily support.
• Coordinate with external security partners during investigations and incidents.

Required Skills and Qualifications

Security Leadership Experience

• 7+ years of experience in information security, including hands-on technical work.
• Experience leading or helping manage an organization-wide security program.
• Strong knowledge of cloud security, application security, and identity management.
• Experience with vulnerability management, threat detection, and incident response.
• Ability to investigate technical issues and implement security controls.
• Experience managing security projects and setting priorities across teams.
• Strong communication skills with executives, customers, and technical staff.

Security Tools and Technologies

Relevant technical knowledge includes:

• Application security: SAST, DAST, software composition analysis (SCA), and secrets detection.
• Cloud security: Infrastructure protection, access controls, and configuration reviews.
• Security monitoring: SIEM, endpoint detection and response (EDR), and web application firewalls (WAF).
• Data protection: Data loss prevention (DLP) and secure handling of sensitive information.
• Security automation: SOAR platforms and automated alert workflows.
• Infrastructure as Code: Security scanning and configuration checks.
• AI security: Agent permissions, model integrations, prompt injection, and data exposure risks.

Governance, Risk, and Compliance

• Experience leading SOC 1, SOC 2, ISO 27001, or similar assurance programs.
• Knowledge of security frameworks such as NIST and CIS.
• Understanding of relevant data protection requirements, including GDPR.
• Experience managing risk assessments, security policies, and control reviews.
• Ability to oversee vendor security reviews and third-party risk programs.
• Experience explaining security controls and audit results to enterprise customers.

Leadership Environment and Working Style

This role requires both strategic thinking and practical technical skills. You’ll make decisions about long-term security needs while staying involved in important engineering and operational issues.

You’ll work closely with software developers, infrastructure teams, compliance specialists, and business leaders. Your goal will be to strengthen security without creating unnecessary obstacles for the people building and using the technology.

What to Expect

• Broad ownership: Lead information security, technical controls, compliance strategy, and IT direction.
• Hands-on involvement: Investigate problems, test solutions, and implement controls when needed.
• Executive collaboration: Help leadership understand security risks and make informed decisions.
• AI security challenges: Develop safeguards for new AI applications and employee tools.
• Customer interaction: Explain security practices to sophisticated financial services clients.
• Team leadership: Guide experienced professionals while encouraging clear communication and accountability.

Compensation and Employee Benefits

The position offers a compensation and benefits package that includes:

• Competitive base salary.
• Equity participation.
• 401(k) retirement savings plan.
• Unlimited and flexible vacation.
• Health insurance benefits.
• Fully paid parental leave.
• Company team gatherings in Brooklyn, New York, three times per year.

Specific compensation details and benefit eligibility should be confirmed during the hiring process.

Why Consider This Opportunity?

This Head of Information Security & IT position offers the chance to lead security for a business that handles sensitive financial information and develops sophisticated cloud software.

• Set the direction of a growing information security program.
• Work on cloud, application, corporate, and AI security challenges.
• Lead experienced security and IT professionals.
• Help shape security practices for new AI tools and applications.
• Work directly with executive leadership and enterprise customers.
• Combine strategic responsibility with hands-on technical problem-solving.

This opportunity is a strong fit for a security leader who enjoys building effective programs, solving technical problems, and helping organizations manage risk as their technology evolves.