Head of Security & IT

Allium is building the system of record for onchain finance, ingesting, verifying, and standardizing data across 140+ blockchains and 30+ petabytes of history. As Head of Security & IT, you own Allium's security program and employee IT environment, setting priorities, implementing controls, and partnering with Engineering and business teams to protect the systems and data the company depends on. You'll combine technical execution with ownership of a growing function, working directly on problems while shaping the team, tools, and specialist support needed. AI is changing how software is built and how attackers operate, and you'll help Allium use agents and automation safely while building effective defenses against credential theft, compromised dependencies, and fast-moving attacks.

What you'll do

• Own the security roadmap by assessing the environment, prioritizing material risks, turning priorities into implemented controls with clear owners, and giving leadership a concise view of progress, unresolved exposure, and decisions that require their judgment.
• Set the security approach for AI agents by establishing practical standards for agent identities, tool permissions, credential handling, execution isolation, data access, and logging, and partnering with Engineering to evaluate coding assistants, model gateways, and integrations.
• Own employee IT and workforce security across employee devices, identities, cloud environments, and critical SaaS applications, tracking exceptions, assigning remediation owners, building reliable onboarding and offboarding processes, and defining how routine IT support is delivered.
• Strengthen cloud and software security by reducing standing privilege and strengthening separation between employee devices, development environments, and production, establishing practical standards for credential storage and privileged access, and partnering with Engineering on secure development, CI/CD, and software supply-chain controls.
• Lead detection, response, and recovery by building a coordinated program across cloud, identity, development, employee systems, and agent activity, defining responsibilities for internal teams and providers, maintaining escalation paths, and testing containment, credential-revocation, and recovery procedures.
• Build a fast, evidence-based vulnerability response program by maintaining visibility into internet-facing services including developer tools and management interfaces, tracking relevant threats and active exploitation, determining exposure, and coordinating patching, isolation, credential revocation, or other mitigations.
• Support enterprise trust by coordinating audits, customer security reviews, vendor assessments, and technical evidence, and working with Legal and commercial teams so security commitments reflect actual controls and have clear owners.
• Build the function by selecting and managing security and IT tools and providers, automating recurring work, helping hire and develop the team as needs grow, and using AI to improve the team's work with appropriate data safeguards and validation.

What you bring

• Typically 6+ years of relevant security engineering, infrastructure security, or corporate security experience, with evidence of independently owning meaningful security improvements.
• Recent hands-on experience implementing controls in cloud-based environments, with the ability to investigate technical issues yourself and work effectively with engineers who own production systems.
• Depth across several relevant areas, including identity, cloud or application security, detection and response, endpoint security, or software supply-chain security, and the judgment to know when specialist support is needed.
• Experience building or improving a security program at a growing technology company, including making tradeoffs with limited time and resources.
• Practical judgment about AI-enabled tools: where they can help, how their access should be controlled, and how to validate their behavior and output.
• Clear communication with engineers, business leaders, customers, and providers, with the ability to explain a risk, recommend a proportionate response, and follow through.

Nice to have

• Experience in Enterprise SaaS, data infrastructure, fintech, or another business serving customers with rigorous security requirements.
• Experience securing AI agents, developer tooling, CI/CD, or systems that use non-human identities and third-party integrations.
• Experience with SOC 2, customer assurance, vendor security reviews, or managing external security and IT providers.

What we offer

• Medical, dental, vision, life and AD&D insurance: US employees receive 100% coverage for Gold plans and 80% for dependents.
• Meaningful early-stage equity: every full-time employee receives a stock option grant to share directly in Allium's upside.
• Flexible, trust-based paid time off that meets or exceeds local statutory vacation requirements in every country where we hire.
• Company-sponsored 401(k) plan in the US for pre-tax retirement savings.

About Allium

Allium ingests, verifies, and standardizes data across 140+ blockchains and 30+ petabytes of history, closing structural gaps that prevent blockchains from becoming systems of record. The company serves finance, accounting, and risk teams needing audit-grade answers; engineers and product teams needing production-ready infrastructure; and strategy, research, and executive teams seeking clarity on ecosystem economics. Customers and users include Visa, Stripe, G-SIB banks, Big 4 accounting firms, BCG, Coinbase, Phantom, and Uniswap.