
Head of Information Security at OpenZeppelin
Blockchain security leader with open-source libraries and development platform.
Team of 121Seed
Own and mature the company's Information Security, Privacy & IT program end-to-end under Legal; manage the team and department OKRs, risk posture, multi-year roadmap, and technology budget/procurement; lead AI security and governance for internal AI adoption including agentic infrastructure, model-provider/vendor diligence, retention/training-use commitments, DPAs, subprocessors, and EU AI Act readiness; own audit/certification/attestation strategy and execution including SOC 2 Type 2, ISO/IEC 27001, pen testing, internal audits, vendor risk, and customer security diligence with regulated financial institutions; own privacy/data governance including data mapping, classification, records of processing, GDPR and CCPA/CPRA compliance, and privacy-by-design reviews; own incident response, breach notification with Legal, bug bounty programs, and partner with development teams on SDLC security; oversee IAM, provisioning, endpoint/MDM, physical security, disaster recovery, business continuity, backups, and automation/AI-enabled IT ops; requires 10+ years in Security and IT, including 3+ years leading IT Security and GRC in a high-growth tech company, with executive/board-facing ownership of a security program; must have experience securing or governing AI/LLM-enabled products or enterprise AI adoption; bonus: 5+ years in blockchain or fintech serving enterprise clients
Remote anywhere