Head of Security & IT

Allium • New York, NY

1d

About The Position

Allium is hiring a hands-on security leader to own its security program and employee IT environment. The role sets security priorities, implements controls, and partners with Engineering and business teams to protect company systems and data. It combines direct technical execution with ownership of a growing function, including shaping the team, tools, and specialist support.

The role will establish practical safeguards for AI agents and automation while building defenses against credential theft, compromised dependencies, and other fast-moving attacks. It will assess the environment and prioritize risks; oversee security across employee devices, identities, cloud environments, and critical SaaS; strengthen cloud and software security; and lead detection, response, and recovery. The position also supports vulnerability response and enterprise trust by coordinating audits, customer security reviews, vendor assessments, and technical evidence. It will select and manage security and IT tools and providers, automate recurring work, and help grow the team.

Requirements

• Typically 6+ years of relevant security engineering, infrastructure security, or corporate security experience, with evidence of independently owning meaningful security improvements.
• Recent hands-on experience implementing controls in cloud-based environments; ability to investigate technical issues directly and work effectively with engineers who own production systems.
• Depth across several relevant areas, such as identity, cloud or application security, detection and response, endpoint security, or software supply-chain security, and judgment about when specialist support is needed.
• Experience building or improving a security program at a growing technology company, including making tradeoffs with limited time and resources.
• Practical judgment about AI-enabled tools, including how they can help, how to control their access, and how to validate their behavior and output.
• Clear communication with engineers, business leaders, customers, and providers; ability to explain risks, recommend proportionate responses, and follow through.

Nice To Haves

• Experience in enterprise SaaS, data infrastructure, fintech, or another business serving customers with rigorous security requirements.
• Experience securing AI agents, developer tooling, CI/CD, or systems that use non-human identities and third-party integrations.
• Experience with SOC 2, customer assurance, vendor security reviews, or managing external security and IT providers.

Responsibilities

• Own the security roadmap: assess the environment, prioritize material risks, implement controls with clear owners, and report progress, unresolved exposure, and decisions to leadership.
• Set practical security standards for AI agents, including identity, tool permissions, credential handling, execution isolation, data access, and logging; partner with Engineering to evaluate tools and test for prompt injection, tool misuse, and unintended actions.
• Own employee IT and workforce security across devices, identities, cloud environments, and critical SaaS applications; track exceptions, assign remediation owners, build onboarding and offboarding processes, and define routine IT support delivery.
• Strengthen cloud and software security by reducing standing privilege, separating employee devices, development environments, and production, establishing credential and privileged-access standards, and partnering with Engineering on secure development, CI/CD, and software supply-chain controls.
• Lead coordinated detection, response, and recovery across cloud, identity, development, employee systems, and agent activity; define responsibilities and escalation paths, and test containment, credential revocation, and recovery procedures.
• Maintain visibility into internet-facing services, track relevant threats and active exploitation, assess exposure, and coordinate patching, isolation, credential revocation, or other evidence- and impact-based mitigations.
• Support enterprise trust by coordinating audits, customer security reviews, vendor assessments, and technical evidence, and work with Legal and commercial teams to ensure security commitments reflect actual controls and have clear owners.
• Build the function by selecting and managing security and IT tools and providers, automating recurring work, and helping hire and develop the team as needs grow.
• Use AI to improve the team's work with appropriate data safeguards and validation.

Benefits

• Medical, dental, vision, life, and AD&D insurance; US employees receive 100% coverage for Gold plans and 80% coverage for dependents.
• Meaningful early-stage equity; every full-time employee receives a stock option grant.
• Flexible, trust-based paid time off; policies in every country of hire meet or exceed local statutory vacation requirements.
• Company-sponsored 401(k) plan in the US.

What This Job Offers

• Job Type: Full-time
• Career Level: Director
• Education Level: No Education Listed