Information Security Lead
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Information Security Lead overseeing a comprehensive security program at Alloy Therapeutics. Responsible for both technical and governance aspects, ensuring data protection and compliance.
Responsibilities:
- Own Alloy's security program in its entirety
- Design and implement IAM controls that enforce least-privilege
- Run a structured vulnerability management program
- Maintain Alloy's information security policy landscape
- Own our SOC 2 type designations
- Design and implement IAM controls
- Own Alloy's approach to protecting proprietary scientific data
- Maintain visibility across Alloy’s environment through logging, alerting, and monitoring tooling
- Work closely with Alloy's AI teams to ensure security in AI-forward environment
- Evaluate new SaaS applications and ensure software landscape doesn't introduce unacceptable risk
- Design and operate elevated controls for sovereign and government-aligned engagements
Requirements:
- Significant breadth across both technical security work and governance
- Hands-on experience with cloud security across Google Workspace and AWS (or GCP/Azure equivalent), including IAM design, cloud storage security, and logging and monitoring configuration
- Experience securing proprietary scientific or research data at massive scale
- Experience defending against advanced and nation-state-level threat actors
- Experience implementing MFA programs including FIDO2/hardware key standards (e.g., YubiKey)
- Demonstrated experience with backup architecture design
- Familiarity with compliance frameworks including SOC 2 Type 2 and/or ISO 27001
- Experience writing security policies and documentation that can withstand external scrutiny
Benefits:
- Competitive base and equity compensation commensurate with level of experience and independence
- 401(k) company match
- Generous personal and family medical, dental and vision benefits with 100% of premiums and deductibles covered
- Company-paid disability (STD, LTD) and life insurance
- Paid parental leave
- Family planning support up to $45,000 (e.g., IVF/PGT, adoption, surrogacy, egg retrieval)
- Unlimited PTO (paid time off) and flexible schedules
- Annual stipend for continuing education with commitment to your career through individualized professional development plan
- Wellness and Extensive Employee Assistance Program (EAP) including resources for mental wellness
Similar Jobs
Senior Staff Product Manager – Platform Security
Senior Staff Product Manager leading Platform Security at Splunk, focusing on security primitives and cryptography. Driving product strategy and execution for a multi-billion-dollar portfolio.
Senior Security Engineer
Senior Security Engineer with 7-10 years experience enhancing security and resilience of enterprise identity infrastructure for leading financial services organization.
Federal Security and Compliance Consultant
Federal Security & Compliance Consultant providing consulting and compliance support for Matrix Design Group's federal projects. Collaborating on security requirements and documentation while supporting client engagements.
Cybersecurity Engineer
Cyber-Security Engineer developing and implementing security concepts for IT, Cloud, and hybrid infrastructures. Contributing to security standards and regulatory compliance in a remote or hybrid capacity.
Director, Network Facility Security
Director of Network Facility Security responsible for leading U.S. physical security strategy at DSV. Ensuring compliance and operational excellence across the distribution network.
RMF Cybersecurity ISSO/SME 3
Cybersecurity Risk Management Framework Information System Security Officer managing RMF lifecycle activities for medical systems. Leading efforts to achieve and maintain Authorizations to Operate while ensuring compliance with cybersecurity requirements.
Associate Security Engineer, Identity Security
Associate Security Engineer providing hands-on support for identity security services in a global cybersecurity organization. Collaborating with teams on identity management and security technologies.
Senior Security Risk Management Consultant
Senior Security Risk Management Consultant driving enterprise-wide security risk management strategies. Partnering with stakeholders and senior leadership to assess and mitigate cybersecurity risks at Trinity Health.
Cybersecurity Project Manager
Cybersecurity Project Manager overseeing AI agent training and evaluation for customers in a dynamic cybersecurity firm. Collaborating with teams to enhance customer cybersecurity posture through innovative solutions.
Ethical Hacker – OT Security
OT Security Consultant at Packetlabs managing security assessments of Operational Technology environments. Collaborating with clients to improve security posture without operational disruptions.
Security Control Assessor – ISSE Support
Security Control Assessor supporting cybersecurity assessments and compliance activities for federal healthcare systems. Collaborating with teams to meet Federal security requirements and support modernization.
Identity & Devices Security Architect – Client Consulting
Security Architect at Cyclotron designing enterprise deployments of Microsoft 365 Identity and Device Management tools. Collaborating with clients to enhance protection of Microsoft-based assets.
Especialista Técnico, SAP Security & GRC Access Control
Technical Specialist in SAP Security & GRC Access Control involved in migrating systems and managing authorizations. Collaborating with teams to ensure integrity and compliance in security assignments.
Senior Consultant SAP Security, GRC Access Control
Senior SAP Security Consultant leading migration of SAP GRC Access Control to 12 Embedded. Requires expertise in SAP Security tools and methodologies for implementation.
Principal Enterprise Security Architect, Senior Associate
Principal Enterprise Security Architect at Intelance responsible for security architecture reviews and risk assessments for complex enterprises. Collaborating with governance and risk advisors and producing client-ready reports.
Presales Security Expert – Major Account Manager GSI
Presales Security Expert enabling the success of Fortinet's growing cybersecurity business. Collaborating with Account Managers and building technical relationships with customers for secure platform solutions.
Social Security Disability Benefits Expert
Disability Benefits Expert conducting consultations for SSI eligibility assessment and managing cases. Offering unbiased guidance on federal and state benefits through a remote work environment.
Senior SAP Security Consultant – GRC/AC
SAP Security Consultant focusing on S/4HANA implementation and security requirements for clients in Brazil. Working remotely, directly engaging with business areas and technical documentation.
Enterprise Account Executive – Cybersecurity
Enterprise Account Executive responsible for driving strategic growth across large enterprise clients in cybersecurity. Partnering with C-level leaders to transform cyber risk management in complex sales cycles.
Senior Security Advisor – Offensive and Defensive
Senior Offensive Security Advisor helping mitigate threats to Desjardins's systems and networks. Leading strategic initiatives and advising on security posture.