Chronograph
Head of Information Security & IT
$225K–$270K
Brooklyn, New York, United States · Director · Full-time · Posted Aug 26, 2026
- Experience
- 7+ years of information security experience, including meaningful hands-on technical experience and increasing ownership of security programs.
About the job
Own Chronograph’s information security strategy, architecture, execution, and IT direction, including technical security, AI risks, compliance, and external assurance.
What you'll do
- Lead and improve the security program, roadmap, team, and executive communications.
- Guide cloud and application security, vulnerability management, detection and response, and security tooling; implement controls or proofs of concept when appropriate.
- Own AI security, corporate IT direction, and SOC 1, SOC 2, and ISO 27001 assurance strategy; represent security with customers and auditors.
What they ask for
- Strong technical judgment, including investigating problems, developing solutions, building proofs of concept, and implementing controls.
- Broad experience across cloud and application security, identity, vulnerability management, and detection and response.
- Experience owning or materially leading an information security program, including risk management, policies, controls, and a security roadmap, using frameworks such as NIST, CIS, or GDPR.
- Experience leading SOC1, SOC 2, ISO 27001, or comparable assurance programs, and representing security posture to enterprise customers and auditors.
Pay
$225,000 — $270,000 USD (base salary)
Tools
NIST, CIS, GDPR, SAST, SCA, DAST, SOAR, SIEM
AI focus
Own security strategy for internal and product AI use; secure AI tools, agents, models, integrations, and permissions; threat-model AI features and assess emerging AI threats and security tooling.
Model-written summary · the original posting is authoritative