IT and Security Lead

About the role

This role brings IT and security ownership in‑house, responsible for platform architecture and security practices that protect Holistic AI’s systems, data and enterprise customer trust. You will work closely with Engineering, leadership and commercial teams as the company scales its security capabilities.

Key responsibilities

• Own and advance the IT and security posture across company systems and the product platform.
• Contribute to platform architecture decisions with a security‑first lens.
• Establish and maintain practical security controls, access management and operational hygiene.
• Support enterprise customer and audit expectations on security, providing required processes and evidence.
• Partner with Engineering on secure design, vulnerability management and incident readiness.
• Work with Sales and other teams on customer RFPs, security and InfoSec questionnaires, and other security requirements.
• Join customer calls to explain security controls, practices and approach, addressing concerns.
• Develop and maintain security policies, procedures and documentation as the company grows.
• Support security risk management across systems, vendors and third‑party services.
• Build IT and security capabilities towards sustainable in‑house ownership.

Required profile

• 7+ years of experience in IT security, security engineering, or platform/security ownership roles.
• Working knowledge of cloud security, identity and access management, and secure architecture fundamentals.
• Experience supporting enterprise customer security requirements, including RFPs and InfoSec questionnaires.
• Confidence speaking directly with customers and explaining security concepts to technical and non‑technical audiences.
• Comfort working independently, getting hands‑on where needed and building structure where none exists.
• Ability to prioritise risk pragmatically in a growing company, protecting what matters without freezing delivery.
• Clear communication with technical and non‑technical stakeholders.
• Ownership mindset and strong documentation habits supporting a growing team.

Required skills

• Cloud security
• Identity and Access Management (IAM)
• Secure architecture fundamentals