Role Overview
The Head of InfoSec and IT Ops at AI for Procurement directs the enterprise security and IT operations system as the organization scales its global operations. This remote-eligible position, based out of San Francisco, suits an experienced security leader with a strong background in high-growth B2B SaaS environments.
Key Responsibilities
Own the enterprise security program by establishing strategy, risk appetite, policies, control frameworks, roadmaps, metrics, executive reporting, and decision rights.
Clarify and operate the product and corporate boundary by partnering with Product Security to define ownership across application security, cloud and production security, identity engineering, vulnerability management, detection and response, and customer trust.
Lead IT operations and engineering by building a global service model covering support, identity, endpoints, SaaS, collaboration tools, office networks, automation, asset lifecycle, and resilience.
Build detection and response capabilities by defining priority threats, improving telemetry, establishing 24/7 response, running incident exercises, and implementing corrective actions.
Manage governance, risk, compliance (GRC), assurance, and customer trust processes including SOC 1, SOC 2, ISO 27001, and ISO 42001, while preparing for future public-company controls.
Secure internal AI tools and applications by partnering with internal teams to define risk tolerance, frameworks, and infrastructure for securely deploying in-house AI.
Drive enterprise identity, access management (EIAM), and data protection through mature joiner-mover-leaver processes, privileged access, data classification, DLP, and encryption.
Manage third-party vendor risk and resilience by tiering vendors, ensuring operational controls, defining RTO and RPO metrics, and maintaining crisis readiness.
Build and develop the team and culture by assessing capability gaps, hiring selectively, cultivating security and IT champions, and ensuring secure paths are user-friendly.
Requirements
12+ years of professional experience spanning information security, security engineering, IT engineering and operations, risk, or related fields.
5+ years of leadership experience managing teams within a high-growth B2B SaaS company.
Demonstrated background in owning broad enterprise security programs and partnering closely with product and engineering teams.
Proven leadership managing major incidents, detection and response, vulnerability management, identity, endpoint and SaaS, and cloud programs.
Practical experience handling SOC 1, SOC 2, ISO 27001, privacy obligations, customer assurance, and audit remediation.
Strong technical judgment to review architecture, challenge IAM and cloud decisions, understand data flows, and evaluate real risk reduction.
History of scaling IT service delivery and systems engineering through automation, self-service, and clear SLOs.
Ability to establish decision rights in a federated environment and influence executives without relying on hierarchy.
Excellent written and incident communication skills with a calm demeanor under pressure.
AI-forward mindset with hands-on understanding of LLM and agent risks, tool access, prompt injection, data leakage, and governance.
Nice to Have
Experience working at a procurement, fintech, payments, enterprise workflow, or data-sensitive SaaS company.
Professional certifications such as CISSP, CISM, cloud security, incident response, or ISO lead implementer and auditor.
Experience building an internal audit or SOX readiness program, or operating through an initial public offering (IPO).
Experience integrating or consolidating security and IT organizations following leadership changes.
Skills and Tools
Large Language Models (LLM)
Identity and Access Management (IAM)
Governance, Risk, and Compliance (GRC)
SOC 1, SOC 2, ISO 27001, ISO 42001
Data Loss Prevention (DLP)
Enterprise IT Operations and Infrastructure
About the Company
AI for Procurement builds an AI platform designed for enterprise procurement, helping humans and agents work together to orchestrate procurement across teams, tools, and suppliers. The company is trusted by major global enterprises, backed by prominent investors including Y Combinator, Tiger Global, and BOND, and has been recognized by Forbes Fintech 50 and Fast Company's Most Innovative Companies.
How to Apply
To apply for this position, please visit the official company careers page.
