Anomaly - Information Security Lead

United States1mo ago

In Office Staff NA Cybersecurity Cloud Computing Tech Lead AWS Google Workspace Risk Management

Requirements

• Experience owning a security program at a startup or growth-stage company (approximately 20–150 employees) • Strong working knowledge of SOC 2 and HIPAA environments, including running audits end-to-end and working with security vendors • Ability to design pragmatic security controls across AWS, application, and internal IT environments (Google Workspace + OSX) • Demonstrated judgment in balancing security, velocity, and business needs, including customer-facing communication

Responsibilities

• Own the security program: Define and operate the company’s security program, including policies, controls, risk management, and the ISMS • Own the security program: • Lead compliance and customer trust: Own SOC 2 / HIPAA programs, audits, and all customer-facing security processes (questionnaires, diligence, reviews) • Lead compliance and customer trust: • Design pragmatic security controls: Establish scalable security architecture and guardrails across cloud, data, application systems, and internal IT • Design pragmatic security controls: • Enable the organization: Embed security into the SDLC and internal workflows, including the controlled adoption of AI agents across all aspects of the business • Enable the organization: