Head of Information Security
- Compensation
- Not disclosed
- Location
- Los Angeles
- Work setup
- Not specified
- Seniority
- C level
- Employment
- Not specified
- Experience
- 5+ years
- Category
- Security
- Posted
Skills
Must have
- 8+ years of total experience across cybersecurity, information security, security operations, IT, infrastructure, or related technical fields.
- 3-5+ years of experience in a dedicated security operations leadership, incident response leadership, or security management role.
- Strong hands-on experience with incident response, security monitoring, threat detection, threat intelligence, vulnerability management, and security investigations.
- Experience managing or operating SIEM, EDR, SOAR, XDR, vulnerability management, cloud security monitoring, identity security, or related security platforms.
- Experience securing cloud environments such as AWS, Azure, or GCP.
- Strong understanding of modern attack vectors, adversary tactics, techniques, and procedures, including frameworks such as MITRE ATT&CK.
- Familiarity with security and compliance frameworks such as NIST, ISO 27001, SOC 2, CIS Controls, OWASP, SANS, SSAE, ITIL, or similar standards.
- Experience creating security operations metrics, dashboards, executive reports, and remediation tracking processes.
- Strong written and verbal communication skills, with the ability to explain technical security issues to executive, technical, and non-technical audiences.
- Ability to remain calm, structured, and decisive during high-pressure security events.
Nice to have
- Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, Engineering, or a related field, or equivalent practical experience.
- Security certifications such as CISSP, CISM, GCIH, GCIA, CRISC, ISSAP, OSCP, or similar.
- Experience leading or working with a 24/7 SOC or managed security service provider.
- Experience in a SaaS, cloud-native, enterprise software, fintech, healthcare, AI, or regulated technology environment.
- Experience supporting SOC 2, ISO 27001, HIPAA, PCI, or other customer-driven compliance programs.
- Experience building security operations programs from an early or scaling stage.
- Experience partnering with Sales or Customer Success on enterprise customer security reviews.
Full description
About Athena
Athena () pairs world-class leaders with elite executive assistants. It’s where some of the most powerful partnerships in the world get built.
Our clients are founders, executives, and leaders whose ambition exceeds their time. Athena is the first company to build a human-in-the-loop executive support system, combining trained Executive Assistants with market-leading AI to help them stay organized, follow through on priorities, and operate at their highest level.
Athena is one of the largest companies in this category, with 3,000+ clients and over $100M in annual run rate. Our clients include Uber, Shopify, and Goldman Sachs.
We are fully global, working across time zones and cultures. Joining Athena means creating something that fundamentally changes how people live and work and brings extraordinary achievement within reach.
Who We’re Looking For
We’re looking for people who take their work seriously and want to get better at it.
You should be thoughtful in how you approach problems, willing to take ownership, and able to follow through without constant direction. You ask questions when something doesn’t make sense, and you care about getting the details right.
You should be comfortable working with people who have high expectations and limited time. That means being clear, responsive, and reliable.
We’re also looking for people who are interested in how this role is changing. The way work gets done is in flux between people, systems, and AI. We want people who are curious about that and willing to adapt as technology evolves.
You don’t need to know everything on day one, but you should be able to learn quickly and apply what you learn.
Role Overview
We are looking for a Head of InfoSec Operations to lead the day-to-day execution of our cybersecurity operations, security monitoring, incident response, threat detection, vulnerability management, and client-facing security assurance.
This role will bridge the gap between security strategy and tactical execution. The ideal candidate is hands-on, operationally strong, calm under pressure, and able to work cross-functionally with IT, Engineering, DevOps, Product, Legal, Compliance, Sales, and Customer Success.
In addition to leading internal security operations, this person will serve as a key point of contact for client security questions, customer due diligence, security questionnaires, vendor risk reviews, and enterprise security discussions.
Key Responsibilities
Security Operations & Incident Response
- Lead and continuously improve the company’s security operations function, including monitoring, detection, investigation, response, and remediation.