What are the responsibilities and job description for the Director of Security and IT position at Aliro Quantum?
Aliro builds software for entanglement-based quantum networks. We are hiring our first Director of Security and IT to own two functions that operate as one: the security program and company IT.
You will join with the security program already underway (GRC platform deployed, core policies drafted, strategy and roadmap created) and the IT function still to be built. You own both day to day operations, with strategic direction from our fractional CISO.
What You'll Own
- Security and compliance. SOC 2 evidence, policy maintenance, the security risk register, audit and pen-test coordination.
- IT operations. The company device fleet end to end: procurement, provisioning, MDM, patching, helpdesk, offboarding.
- Identity and access. Joiner-mover-leaver across core systems, integrated with the company identity provider.
- Customer security. Security questionnaires (SIG, CAIQ, custom) and customer-facing security artifacts.
- Secure development support. Coordinate with engineering on CI/CD security tooling, SBOMs, and vulnerability remediation.
- Vendor and tool management. Own the security and IT toolchain and its integrations.
What We're Looking For
- Hands-on experience running both a security/GRC program and IT operations, ideally in one small-company role.
- Fluency with MDM, zero-touch device provisioning, and an identity provider.
- SOC 2 audit preparation experience (strongly preferred).
- Working understanding of secure development practices; you can talk shop with engineers without being one.
- Strong writing: policies, runbooks, questionnaire responses, audit docs.
- Comfort building a function from scratch and running it at the same time.
Nice to Have
- Federal compliance frameworks (FedRAMP, CMMC, NIST 800-171/800-53).
- Hardware security or cryptographic module validation exposure (FIPS 140-3, Common Criteria).
- Certifications (CISSP, CISM, CISA, Security ) are useful, not required.
- Curiosity about quantum networking and post-quantum cryptography.
Pay: $160,000.00 - $200,000.00 per year
Benefits:
- Dental insurance
- Flexible schedule
- Health insurance
Experience:
- Security: 5 years (Required)
- IT: 5 years (Required)
Work Location: Hybrid remote in Brighton, MA 02135
Salary : $160,000 - $200,000