Head of Security & IT

Company Overview:

We are building Protege to solve the biggest unmet need in AI - getting access to the right training data. The process today is time intensive, incredibly expensive, and often ends in failure. The Protege platform facilitates the secure, efficient, and privacy-centric exchange of AI training data.

Solving AI’s data problem is a generational opportunity. We’re backed by world-class investors and already powering partnerships with some of the most ambitious teams in AI. The company that succeeds will be one of the largest in AI - and in tech.

We’re a lean, fast-moving, high-trust team of builders who are obsessed with velocity and impact. Our culture is built for people who thrive on ambiguity, own outcomes, and want to shape the future of data and AI.

Purpose

We're hiring our first Head of Security & IT to own security end-to-end: strategy, architecture, operations, and culture. This is a hands-on leadership role and you won't have a large team beneath you (yet), so you need to be comfortable building the program from the ground up while still getting into the technical weeds. You'll report directly to the VP of Engineering and work closely with engineering, product, and legal.

This is a high-impact role where you'll shape how we earn and keep the trust of AI companies and our data partners.

What You’ll Do:

• Mature the Security & Compliance Program

• Audit and improve the existing security program by identifying gaps, prioritizing improvements, and bringing more structure to what exists.

• Formalize security policies and frameworks appropriate for our stage

• Own and evolve our compliance posture. We have SOC 2 Type II in place and you'll maintain it, improve our controls, and provide automation wherever needed

• Ensure compliance with HIPAA and other healthcare data regulations, and build a robust PHI protection program

What Success Looks Like:

• 30 days: Learn and Assess

• Complete a thorough audit of the existing security program, infrastructure, tooling, and policies

• Meet with every team lead to understand their workflows, data handling practices, and where security creates friction or blind spots

• Review our SOC 2 Type II and HIPAA controls and identify areas where we're passing but brittle vs. areas that are solid

• Map the full training data lifecycle end-to-end from a security and risk perspective

What You Bring:

• Must Haves

• 8+ years in security roles, with at least 2 years in a leadership capacity

• Deep technical foundation: you've worked as or alongside engineers and can credibly review architecture, infrastructure, and code

• Experience building or significantly maturing a security program at an early-stage or high-growth company (not just maintaining one at a large enterprise)

• Strong understanding of cloud security (AWS, GCP, or Azure), identity/access management, and data protection at scale

• Hands-on experience with compliance frameworks (SOC 2, ISO 27001). You’ve maintained certifications and know how to expand scope without over-engineering the problem

• Hands-on experience with HIPAA compliance

• Comfort operating as an individual contributor and a leader simultaneously

Protege Values

Pass the Loved Ones’ Test
We act with integrity and do the right thing - especially when it’s hard and no one is watching.

Always Find a Way
We are resourceful, resilient builders who solve hard problems and push through obstacles.

Go Fast and Grow Fast
Velocity matters. We move with urgency, learn quickly, and continuously improve as individuals and as a company.

Practice Kindness and Candor
We communicate directly and respectfully, building trust through honest feedback and genuine care for one another.

Deliver Together
We win as one team. Collaboration, accountability, and shared ownership drive our success.

Own the Outcome. Hone the Craft.
We take pride in our work, sweat the details, and continuously raise the bar for excellence.