Remote InfoSec Lead — Incident Response & Governance

Alloy Therapeutics; Waltham (MA); On-site; USD 150,000 - 200,000; Full time

Benefits offered by this job

401(k) with company match

Health & family benefits

Disability and life insurance

Paid parental leave

Family planning support

Unlimited PTO

Continuing education stipend

Wellness program & EAP

Job summary

Alloy Therapeutics is seeking an Information Security Lead to own the company’s security program end-to-end. You will balance hands-on engineering with governance, policy writing, and audit readiness to safeguard bio‑research and data assets.

You’ll design IAM controls, manage patch cycles, and lead vulnerability management, while aligning security with Legal, Finance, and vendors in a remote-first environment.

Qualifications

• Broad experience in technical security and governance.
• Hands-on cloud security experience with major platforms.
• Experience with large-scale research data security and compliance.

Responsibilities

• Incident response planning, testing, and execution with continuity planning.
• Vulnerability management, patching, and endpoint security.
• Policy writing, compliance evidence collection, and audit readiness.
• IAM controls, least-privilege across cloud and on‑prem systems.
• Data protection, encryption, key management, and retention.
• Security monitoring, detection planning, and threat response.

Skills

Cloud security

IAM design

Policy writing

SOC 2

Incident response

Tools

GCP/AWS/Azure IAM

Job description

Alloy Therapeutics is seeking an Information Security Lead to own the company’s security program end-to-end. You will balance hands-on engineering with governance, policy writing, and audit readiness to safeguard bio‑research and data assets.

You’ll design IAM controls, manage patch cycles, and lead vulnerability management, while aligning security with Legal, Finance, and vendors in a remote-first environment.