Information Security Lead

Alloy Therapeutics, Inc.

Information Security Lead overseeing a comprehensive security program at Alloy Therapeutics. Responsible for both technical and governance aspects, ensuring data protection and compliance.

Posted 7/21/2026full-timeRemote • 🇺🇸 United StatesSenior💰 $150,000 - $200,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in designing and implementing IAM controls, managing vulnerability programs, and ensuring compliance with SOC 2 Type 2 and ISO 27001 standards. Proven ability to secure proprietary scientific data and defend against advanced threat actors in a cloud environment.

Highest-signal resume keywords

IAM Control DesignCloud Security (Google Workspace, AWS)MFA Implementation (FIDO2, YubiKey)Vulnerability ManagementSOC 2 Type 2 Compliance

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

IAM DesignCloud Storage SecurityLogging and Monitoring ConfigurationBackup Architecture DesignSecurity Policy Writing

Tools & Technologies

Logging ToolsAlerting ToolsMonitoring Tools

Industry Keywords

SOC 2 Type 2ISO 27001Proprietary Scientific Data SecurityAdvanced Threat DefenseGovernance

Tech Stack

Tools & technologies

AWSAzureCloudGoogle Cloud Platform

About the role

Key responsibilities & impact

Own Alloy's security program in its entirety
Design and implement IAM controls that enforce least-privilege
Run a structured vulnerability management program
Maintain Alloy's information security policy landscape
Own our SOC 2 type designations
Design and implement IAM controls
Own Alloy's approach to protecting proprietary scientific data
Maintain visibility across Alloy’s environment through logging, alerting, and monitoring tooling
Work closely with Alloy's AI teams to ensure security in AI-forward environment
Evaluate new SaaS applications and ensure software landscape doesn't introduce unacceptable risk
Design and operate elevated controls for sovereign and government-aligned engagements

Requirements

What you’ll need

Significant breadth across both technical security work and governance
Hands-on experience with cloud security across Google Workspace and AWS (or GCP/Azure equivalent), including IAM design, cloud storage security, and logging and monitoring configuration
Experience securing proprietary scientific or research data at massive scale
Experience defending against advanced and nation-state-level threat actors
Experience implementing MFA programs including FIDO2/hardware key standards (e.g., YubiKey)
Demonstrated experience with backup architecture design
Familiarity with compliance frameworks including SOC 2 Type 2 and/or ISO 27001
Experience writing security policies and documentation that can withstand external scrutiny

Benefits

Comp & perks

Competitive base and equity compensation commensurate with level of experience and independence
401(k) company match
Generous personal and family medical, dental and vision benefits with 100% of premiums and deductibles covered
Company-paid disability (STD, LTD) and life insurance
Paid parental leave
Family planning support up to $45,000 (e.g., IVF/PGT, adoption, surrogacy, egg retrieval)
Unlimited PTO (paid time off) and flexible schedules
Annual stipend for continuing education with commitment to your career through individualized professional development plan
Wellness and Extensive Employee Assistance Program (EAP) including resources for mental wellness