Head of Infrastructure Security | Global Alternative Investment Firm
New York, New York County, New York, 10261, USA
Listed on 2026-09-20
-
IT/Tech
Cybersecurity
Head of Infrastructure Security | Global Alternative Investment Firm Head of Infrastructure Security | Global Alternative Investment Firm
Get AI-powered advice on this job and more exclusive features.
[Up to c. $500k Comp Package | Hybrid Working - 3 Days in Office]
Role Overview
We’re working with a globally recognised investment firm investing heavily in infrastructure security as part of a broader strategy to stay ahead in a rapidly evolving technology landscape. As part of this effort, they’re hiring a Head of Infrastructure Security - a strategic and technical leadership position reporting into the CISO, with a remit spanning secure architecture, engineering, governance, and innovation.
This is a senior-level role for a seasoned security leader with deep expertise in large-scale infrastructure environments, particularly across Linux, Windows, and enterprise SaaS ecosystems. You’ll shape policy, drive tooling adoption, manage high-performing engineers and architects, and partner cross-functionally to ensure security is embedded into every layer of the organisation’s operations...
Key Responsibilities
- Define and drive the firm’s infrastructure security vision, building a robust strategy that aligns with business objectives and risk posture
- Oversee secure configuration and operational integrity across both Linux and Windows server estates - including Active Directory, DNS, and file-sharing protocols
- Lead efforts to protect data at rest and in transit - including the design and implementation of DLP measures across database and unstructured data environments
- Manage endpoint security strategy across desktops, mobile devices, and remote working environments
- Ensure secure integration and monitoring of SaaS platforms such as Office
365, Salesforce, Slack, and Box - maintaining strong governance and regulatory alignment - Lead the development of a comprehensive vulnerability management programme - ensuring proactive patching, effective coverage, and lifecycle controls for EOL devices
- Oversee authentication and access infrastructure, managing platforms such as Okta and Microsoft EntraID for SSO and MFA
- Build, mentor, and lead a high-performing team of engineers and architects - fostering innovation, ownership, and ongoing development
- Collaborate with teams across engineering, infrastructure, and compliance to embed security standards into every stage of the product lifecycle
- Support security evaluations for new products, platforms, and services in partnership with the Compliance team
- Stay ahead of threat intelligence, tooling advancements, and evolving risk vectors - ensuring the firm remains on the cutting edge of infrastructure defence
What You’ll Bring...
- 9+ years' experience in senior infrastructure security leadership roles, ideally within high-availability, high-compliance environments
- Deep expertise securing both Linux and Windows platforms, including Active Directory, DNS, and core infrastructure services
- Experience owning endpoint and mobile device security policy at scale
- Leadership experience building and managing engineering teams across infrastructure security and architecture
- Demonstrable success in designing and implementing enterprise DLP and data protection strategies
- Hands-on understanding of SaaS security - including Office
365, Salesforce, Slack, Box, and similar platforms - Strong background in vulnerability management - from tooling selection to patch orchestration and lifecycle governance
- Proven ability to drive cross-functional collaboration and embed security into fast-paced, agile development environments
- Excellent communicator with the ability to influence stakeholders across technical and non-technical domains
- Bachelor’s degree in Computer Science, Information Security, or a related field
- (Pr…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).