Head of Security: Cloud, Gov & Physical

StudyFetch Inc.; Beverly Hills (CA); On-site; USD 260,000 - 420,000; Full time

Benefits offered by this job

Employer-paid medical, dental, vision

401(k) with employer matching

Daily team dinner in-office

Job summary

StudyFetch Inc. is seeking a Head of Security to own security across cloud, corporate IT, physical spaces, and government market entry. You will build an AI-native security program, implement guardrails for AI usage, and lead third-party pentest initiatives.

You will mentor IT and security staff and expand the security team as the company scales. You will drive security strategy in Google Cloud, manage IAM and access, and ensure compliance with SOC 2, ISO 27001, and FedRAMP requirements.

Qualifications

• 8+ years in security with hands-on cloud, corporate IT, and compliance.
• Led or built security programs at a startup as it scaled.
• Experience running FedRAMP authorization (Rev5 or 20x) and mapping to NIST 800-53.
• Managed or mentored IT or security staff and grew teams.

Responsibilities

• Own cloud & product security posture in GCP, IAM, policies, logging, and threat detection.
• Lead corporate security & IT programs including identity, endpoint, onboarding/offboarding, and access reviews.
• Own physical security systems and visitor management for office environments.
• Design and run AI-native security: audit code, automate compliance evidence, and guardrails for AI use.
• Own SOC 2, policies, vendor risk, and audits; be the security voice in customer engagements.
• Lead FedRAMP program end-to-end; collaborate with sales and leadership on public-sector deals.
• Build incident response plans, runbooks, tabletop exercises, and continuous improvements.

Skills

Cloud security

SOC 2 / ISO27001

FedRAMP

Risk communication

Leadership

Pentest program

GCP experience

Compliance frameworks

Tools

Google Cloud

AWS

Azure

Terraform

Pulumi

Jamf

Cloudflare Zero Trust

Job description

StudyFetch Inc. is seeking a Head of Security to own security across cloud, corporate IT, physical spaces, and government market entry. You will build an AI-native security program, implement guardrails for AI usage, and lead third-party pentest initiatives.

You will mentor IT and security staff and expand the security team as the company scales. You will drive security strategy in Google Cloud, manage IAM and access, and ensure compliance with SOC 2, ISO 27001, and FedRAMP requirements.