СШАSenior Manager, Information Security
2 нед. назад
175k–265k USD / годСШАSeniorHybrid
information securitysecurity roadmapbudget managementcloud securityinfrastructure securitysreeda workflows
Lead and build the information security function, protecting proprietary IP and infrastructure in an AI-focused technology company.
Обязанности
- designs and manufactures purpose-built AI inference silicon, systems, and software. As our first dedicated Information Security hire, the Senior Manager, Information Security will build a unified security function that consolidates security responsibilities from across the company, with the opportunity to grow a team over time. You will report to the VP of Information Technology and Infrastructure Services and own the security roadmap and budget. Your focus will be protecting proprietary chip design IP (RTL, GDSII), EDA workflows, the software supply chain, internal AI agents, and the corporate, cloud, and lab infrastructure the company depends on. You will partner closely with Silicon and Software Engineering leaders, IT, SRE, and Facilities to keep development, customer collaboration, and product shipping both fast and secure.
- Build and execute a unified security roadmap and budget across corporate IT, cloud, and product development, consolidating tools and managing security vendors.
- Partner with IT and SRE to mature identity governance, endpoint detection and response, vendor risk management, and incident response, and lead readiness for compliance programs such as SOC 2 Type II and ISO/IEC 27001.
- Protect chip design IP (RTL, GDSII), EDA workflows, and software source through least-privilege access, network segmentation, exfiltration controls, and encrypted transfer to foundry and OSAT partners.
- Partner with hardware teams to assess foundry, component-sourcing, and logistics risk and co-architect hardware roots of trust, unique chip identifiers, and secure boot.
- Establish trusted software supply chain practices, including SBOMs, signed builds, and provenance tracking for compilers, runtimes, and model artifacts.
- Secure cloud, colocation, on-premises, API, and customer-facing inference environments by enforcing Zero Trust, phishing-resistant MFA, and DevSecOps practices.
- Establish governance and controls for internal AI agents, defend against external bots and agentic traffic, and track emerging AI regulations.
- Partner with Facilities on lab and physical security, and build a security-first culture that favors simple, low-friction access over workarounds.
Будет плюсом
- Direct experience managing semiconductor or hardware supply chain security, such as foundry/OSAT relationships, secure IP transfer, hardware roots of trust, or anti-counterfeiting measures.
- Experience securing hybrid, colocation, or on-premises lab infrastructure alongside cloud environments.
- Experience managing compliance audits from initial readiness through SOC 2 Type II or ISO 27001 certification.
- Active industry credentials, such as CISSP, CISM, or specialized AI/cloud security certifications.
Другое
- At , we are focused on unleashing the potential of generative AI to power the transformation of technology. We are at the forefront of software and hardware innovation, pushing the boundaries of what is possible. Our culture is one of respect and collaboration.
- We value humility and believe in direct communication. Our team is inclusive , and our differing perspectives allow for better solutions. We are seeking individuals passionate about tackling challenges and are driven by execution. Ready to come find your playground? Together , we can help shape the endless possibilities of AI.
- 7+ years of experience in information security.
- 3+ years of experience leading security programs or teams.
- Technical literacy across corporate IT (RBAC, MDM, SIEM), cloud environments (Kubernetes), and CI/CD security.
- Experience protecting IP-intensive engineering environments, such as semiconductor, hardware, defense, or other sensitive design and source data.
- Practical understanding of how LLMs and autonomous AI agents operate, interact with APIs, and handle sensitive data.
- A pragmatic, startup mindset: rigorous security that does not slow hardware development, customer collaboration, or product shipping.
- Bachelor's degree or equivalent experience.