Head of Security at Tonic AI · LumiJobs

Qualification

SOC 2 audits owned end to endHands-on experience securing AWSComfort in front of customersAI-native workflowSelf-directionExperience at a data infrastructureExperience with ISO 27001What Success Looks LikeIn your first month

Required

Several years leading security at a B2B software company, with a record of building programs rather than inheriting them.
SOC 2 audits owned end to end, plus working knowledge of GDPR and HIPAA.
Hands-on experience securing AWS, GCP, and Azure. You can read an IAM policy, spot a misconfiguration, and fix it with the engineer who owns it.
Experience embedding security in the development lifecycle and running vulnerability management without becoming the team that slows everything down.
Comfort in front of customers. You can answer a 300-question security questionnaire, hold your own on a call with a customer's CISO, and work through redlines with legal.
Experience running corporate security and IT: endpoint management, EDR, incident response, IAM, and vendor risk.
AI-native workflow. You use AI tools yourself, understand where they create real risk, and can write guardrails that people actually follow.
Self-direction. You'll be the security leader, and you'll need to make sound, risk-based calls without waiting for someone to tell you what to do.
Clear communication with very different audiences, from an engineer debugging a finding to an executive weighing a tradeoff.

Preferred

Experience at a data infrastructure, privacy, or AI company.
Experience selling into regulated industries such as healthcare and financial services.
Experience with ISO 27001, HITRUST, or FedRAMP.
Experience securing software that customers deploy in their own environments, alongside SaaS.
Experience at an early-stage or fast-growing company.
What Success Looks Like
In your first month, you'll learn our products, infrastructure, and current controls, take over the security questionnaire queue, and build a clear picture of our biggest risks. By the end of your first quarter, you'll own the SOC 2 program and auditor relationship, have a prioritized roadmap across product, cloud, and corporate security, and have AI-use policies in place that the team actually follows. After that, you'll help shape how security grows at Tonic, including whether and when we hire next.
You'll own security at a company where security is part of the product, not a back-office function.

Head of Security

Responsibilities

Qualification

Required

Preferred

Benefits

Company

Tonic AI

More roles at Tonic AI