> Markdown version of [/jobs/ext/739501-head-of-it-security](https://www.wearedevelopers.com/jobs/ext/739501-head-of-it-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Head of IT Security - **Company:** AVI Foodsystems Inc - **Location:** Sharon, PA, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Amazon Web Services, Microsoft Azure, Software as a Service, Cloud Computing, Cyber Security, Data Transformation, Disaster Recovery, Zero Trust Network Access, Software Vulnerability Management, Large Language Models, Software Security, Mttr, Multi-Cloud, Netsuite Erp, Generative AI, HybridCloud, Data Management, Legacy Systems - **Published:** June 29, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=b69e2c43a0324448 ## About the Role * Experience: 5+ years in IT/Security, with at least 5 years in a leadership role within a $1B+ organization. * Cloud Mastery: Proven track record of securing complex, hybrid environments across AWS, Azure, and Google. * Business Transformation: Direct experience securing large-scale ERP migrations and data modernization projects. * Education/Certs: Bachelor's or Master's in a related field. CISSP, CISM, or CCSP preferred. * Leadership Style: A "Business-First" mindset-someone who can communicate complex cyber risks to ownership and executive stakeholders in terms of business impact. ## Description We are seeking a visionary Security Leader to architect and lead a comprehensive security strategy for a privately held organization. This is a pivotal role during a period of massive modernization as we transition legacy financial systems to advanced cloud ERP, centralize 150+ internal applications, and build a world-class Data & AI ecosystem. The ideal candidate will move beyond "gatekeeping" to act as a business enabler, implementing a modern security fabric that spans multi-cloud environments (AWS, Azure, Google, etc.) and ensure our Technology, Data, and AI initiatives are secure by design., Enterprise Security Architecture: Hybrid Cloud & AI-Ready * Zero Trust Framework: Design and implement a unified identity and access model that treats all users and devices as untrusted until verified, regardless of location. * AI Security & Governance: Establish a security posture for the AI lifecycle, including model risk management, data privacy for LLMs, and protection against emerging AI-specific threats. * Data-Centric Defense: Architect a model focused on protecting the data itself-utilizing automated classification, persistent encryption, and masking-to ensure sensitive information remains secure as it moves through modern analytics pipelines. * Unified Identity Fabric: Build a seamless identity strategy across multi-cloud and on-premise environments to provide a single, secure point of control for the entire workforce. Security Operations & Integration * Operational Modernization: Oversee the security integration of our move from legacy systems to modern platforms, ensuring financial data integrity and auditability in the cloud and across the value chain. * ITSM & SecOps Alignment: Integrate security incident response and vulnerability management directly into service platforms to automate workflows and reduce mean-time-to-resolution (MTTR). * Application & API Security: Secure a portfolio of 150+ internal applications by implementing automated security testing within CI/CD pipelines and enforcing standardized API security protocols. * Managed Services Oversight: Evaluate and manage 3rd-party security offerings (MDR/MSSP) to ensure 24/7 monitoring and response capabilities. GRC (Governance, Risk, & Compliance) * Continuous Compliance: Shift from periodic audits to a continuous monitoring model that provides real-time visibility into our compliance posture. * Third-Party Risk Management (TPRM): Build a robust program to vet and monitor the security health of our growing ecosystem of SaaS and technology partners. * AI Ethics & Policy: Lead the development of internal policies regarding the ethical and secure use of Generative AI and automated decision-making systems. * Business Resilience: Develop and test enterprise-wide disaster recovery and business continuity plans that account for the interdependencies of cloud-based ERP and data platforms. ## Related Videos - [What Developers Get Wrong About Application Quality](https://www.wearedevelopers.com/videos/233-what-developers-get-wrong-about-application-quality) - [The Open-source Java SDK for Multi-Cloud Development - Sandeep Pal](https://www.wearedevelopers.com/videos/2113-the-open-source-java-sdk-for-multi-cloud-development-sandeep-pal) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [Blueprints for Success: Steering a Global Data & AI Architecture](https://www.wearedevelopers.com/videos/1577-blueprints-for-success-steering-a-global-data-ai-architecture) - [Leverage Cloud Computing Benefits with Serverless Multi-Cloud ML ](https://www.wearedevelopers.com/videos/78-leverage-cloud-computing-benefits-with-serverless-multi-cloud-ml) - [Winning the Hybrid Cloud](https://www.wearedevelopers.com/videos/432-winning-the-hybrid-cloud) ## Related Articles - [Stephan Gillich - Bringing AI Everywhere](https://www.wearedevelopers.com/magazine/489-stephan-gillich-bringing-ai-everywhere) - [Coffee with Developers - Maria Apazoglou - Making AI understandable for all in production](https://www.wearedevelopers.com/magazine/475-coffee-with-developers-maria-apazoglou-making-ai-understandable-for-all-in-production) - [Navigating the AI Shift](https://www.wearedevelopers.com/magazine/629-navigating-the-ai-shift) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)