Head of Security & IT

About the role

Allium is building a canonical data layer for onchain finance, ingesting and standardizing data across 140+ blockchains. It is hiring a hands-on security leader to own the security program and the employee IT environment, setting priorities, implementing controls and partnering with Engineering and business teams to protect the systems and data the company depends on. The role combines technical execution with ownership of a growing function.

Key responsibilities

• Own the security roadmap: assess the environment, prioritize material risks and turn them into implemented controls with clear owners, giving leadership a concise view of progress and unresolved exposure.
• Set the security approach for AI agents: establish standards for identities, tool permissions, credential handling, execution isolation, data access and logging; partner with Engineering on coding assistants, model gateways and integrations, and test for prompt injection and tool misuse.
• Own employee IT and workforce security: cover devices, identities, cloud environments and critical SaaS apps, track exceptions, assign remediation owners and build onboarding and offboarding processes.
• Strengthen cloud and software security: reduce standing privileges, separate development from production, and partner on secure development, CI/CD and software supply-chain controls.
• Lead detection, response and recovery: define responsibilities, escalation paths and test containment, credential revocation and recovery procedures.
• Build a fast, evidence-based vulnerability response: track threats and active exploitation, coordinate patching and mitigation, and prioritize by business impact.
• Support enterprise trust: coordinate audits, customer security reviews and vendor assessments, and work with Legal and commercial teams so security commitments match actual controls.
• Build the function: select and manage tools and providers, automate recurring work, and help hire and develop the team, using AI safely.

Required profile

• Typically 6+ years of security engineering, infrastructure security or corporate security experience, with evidence of independently owning meaningful security improvements.
• Recent hands-on experience implementing controls in cloud-based environments, able to investigate technical issues and work with production engineers.
• Depth across several areas such as identity, cloud or application security, detection and response, endpoint security or software supply-chain security.
• Experience building or improving a security program at a growing technology company, with trade-offs under limited time and resources.
• Practical judgment about AI-enabled tools, their access control and validation.
• Clear communication with engineers, business leaders, customers and providers.

Helpful experience

• Enterprise SaaS, data infrastructure, fintech or another business with rigorous security requirements.
• Securing AI agents, developer tooling, CI/CD or systems using non-human identities and third-party integrations.
• SOC 2, customer assurance, vendor security reviews or similar.