> Markdown version of [/jobs/ext/1926038-head-of-it-security](https://www.wearedevelopers.com/jobs/ext/1926038-head-of-it-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Head of IT Security - **Company:** AVI Foodsystems Inc - **Location:** Sharon, MA, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Amazon Web Services, Microsoft Azure, Software as a Service, Cloud Computing, Cyber Security, Data Transformation, Data Migration, Data Security, Disaster Recovery, Zero Trust Network Access, Software Vulnerability Management, Large Language Models, Software Security, Mttr, Multi-Cloud, Netsuite Erp, Generative AI, HybridCloud, Data Management, Legacy Systems - **Published:** August 5, 2026 - **Apply:** https://www.careerbuilder.com/job-details/head-of-it-security-sharon-pa--c2949ec0-459d-4f65-b4e8-74e5114b7da2 ## About the Role * Experience: 5+ years in IT/Security, with at least 5 years in a leadership role within a $1B+ organization. * Cloud Mastery: Proven track record of securing complex, hybrid environments across AWS, Azure, and Google. * Business Transformation: Direct experience securing large-scale ERP migrations and data modernization projects. * Education/Certs: Bachelor's or Master's in a related field. CISSP, CISM, or CCSP preferred. * Leadership Style: A "Business-First" mindset-someone who can communicate complex cyber risks to ownership and executive stakeholders in terms of business impact., Amazon Web Services (AWS), Artificial Intelligence (AI), Business Continuity Planning (BCP), Business Transformation, Cloud Computing, Computer Security, Cryptography, Data Migration, Data Quality, Disaster Recovery, ERP (Enterprise Resource Planning), Ecosystems, Enterprise Architecture, Enterprise Protection, Financial Systems, Food Services, Food and Beverage Industry, Hybrid Cloud, IT Service Management (ITSM), Incident Response, Information/Data Security (InfoSec), Leadership, Microsoft Windows Azure, Online Communications, Policy Development, Risk, Risk Management, Risk Modeling, Security Architecture, Security Monitoring, Software as a Service (SaaS), Test Plan/Schedule, Time Management, Value Chain Model ## Description We are seeking a visionary Security Leader to architect and lead a comprehensive security strategy for a privately held organization. This is a pivotal role during a period of massive modernization as we transition legacy financial systems to advanced cloud ERP, centralize 150+ internal applications, and build a world-class Data & AI ecosystem. The ideal candidate will move beyond "gatekeeping" to act as a business enabler, implementing a modern security fabric that spans multi-cloud environments (AWS, Azure, Google, etc.) and ensure our Technology, Data, and AI initiatives are secure by design. Key Responsibilities Enterprise Security Architecture: Hybrid Cloud & AI-Ready * Zero Trust Framework: Design and implement a unified identity and access model that treats all users and devices as untrusted until verified, regardless of location. * AI Security & Governance: Establish a security posture for the AI lifecycle, including model risk management, data privacy for LLMs, and protection against emerging AI-specific threats. * Data-Centric Defense: Architect a model focused on protecting the data itself-utilizing automated classification, persistent encryption, and masking-to ensure sensitive information remains secure as it moves through modern analytics pipelines. * Unified Identity Fabric: Build a seamless identity strategy across multi-cloud and on-premise environments to provide a single, secure point of control for the entire workforce. Security Operations & Integration * Operational Modernization: Oversee the security integration of our move from legacy systems to modern platforms, ensuring financial data integrity and auditability in the cloud and across the value chain. * ITSM & SecOps Alignment: Integrate security incident response and vulnerability management directly into service platforms to automate workflows and reduce mean-time-to-resolution (MTTR). * Application & API Security: Secure a portfolio of 150+ internal applications by implementing automated security testing within CI/CD pipelines and enforcing standardized API security protocols. * Managed Services Oversight: Evaluate and manage 3rd-party security offerings (MDR/MSSP) to ensure 24/7 monitoring and response capabilities. GRC (Governance, Risk, & Compliance) * Continuous Compliance: Shift from periodic audits to a continuous monitoring model that provides real-time visibility into our compliance posture. * Third-Party Risk Management (TPRM): Build a robust program to vet and monitor the security health of our growing ecosystem of SaaS and technology partners. * AI Ethics & Policy: Lead the development of internal policies regarding the ethical and secure use of Generative AI and automated decision-making systems. * Business Resilience: Develop and test enterprise-wide disaster recovery and business continuity plans that account for the interdependencies of cloud-based ERP and data platforms. ## Related Videos - [What Developers Get Wrong About Application Quality](https://www.wearedevelopers.com/videos/233-what-developers-get-wrong-about-application-quality) - [The Open-source Java SDK for Multi-Cloud Development - Sandeep Pal](https://www.wearedevelopers.com/videos/2113-the-open-source-java-sdk-for-multi-cloud-development-sandeep-pal) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Leverage Cloud Computing Benefits with Serverless Multi-Cloud ML ](https://www.wearedevelopers.com/videos/78-leverage-cloud-computing-benefits-with-serverless-multi-cloud-ml) - [Winning the Hybrid Cloud](https://www.wearedevelopers.com/videos/432-winning-the-hybrid-cloud) ## Related Articles - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks) - [Stephan Gillich - Bringing AI Everywhere](https://www.wearedevelopers.com/magazine/489-stephan-gillich-bringing-ai-everywhere) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Coffee with Developers - Maria Apazoglou - Making AI understandable for all in production](https://www.wearedevelopers.com/magazine/475-coffee-with-developers-maria-apazoglou-making-ai-understandable-for-all-in-production) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Navigating the AI Shift](https://www.wearedevelopers.com/magazine/629-navigating-the-ai-shift)