Chief Information Security Officer (CISO) - NYC

The Opportunity

This is not a traditional enterprise CISO role where you inherit a legacy infrastructure, manage a large team, and maintain the status quo. This is a hands-on, entrepreneurial builder role. You are joining at the frontier of AI security — designing systems that don't yet exist, solving problems the industry is only beginning to name, and treating security not as a cost center but as a strategic and commercial advantage.

We're deploying AI agents at scale across client environments, building our own AI-powered tools, and advising organizations on how to safely integrate autonomous systems into mission-critical workflows. That creates a unique security mandate: you must secure our internal operations, embed security directly into the AI products we build, and help clients deploy agents safely in regulated, high-stakes environments. You are architect, operator, and evangelist all at once.

You'll have the rare opportunity to shape how an entire category of technology gets secured. We're not asking you to retrofit old playbooks onto new problems — we're asking you to write the playbook. If you've been looking for a role where security is core to the product, where you can build things that matter, and where your work influences the broader conversation around AI safety and governance, this is it.

Who You Are

• Experience & Skills
• - You've served as a CISO, VP of Security, or Head of Security at a high-growth tech company, ideally one building or deploying AI systems at scale.
• - You have deep, hands-on experience securing AI and machine learning systems — not just theoretical knowledge, but real work protecting LLM architectures, model training pipelines, and inference infrastructure.
• - You've built and operated cloud-native security programs across AWS, GCP, or Azure, including zero-trust frameworks, identity and access management, and secure multi-tenant architectures.
• - You understand threat modeling and red teaming deeply, and you've led adversarial exercises against complex systems — ideally including AI-specific attack vectors like prompt injection, model inversion, or data poisoning.
• - You've designed and implemented security monitoring, incident response, and compliance programs that scale — you know what good looks like at every stage from startup to enterprise readiness.
• - You have a track record of building or contributing to security products, not just internal programs — something you shipped that customers used, or tooling that became infrastructure for others.

• Mindset & Traits
• - You think like a founder. You see security as a competitive advantage and a product opportunity, not just a compliance checkbox. You want to build things, not just manage them.
• - You are comfortable with ambiguity and energized by unsolved problems. The fact that no one has secured autonomous AI agents at scale yet doesn't intimidate you — it excites you.
• - You are product-minded and commercially aware. You understand that security decisions have business implications, and you can articulate trade-offs in language that non-security stakeholders understand and respect.
• - You are technical enough to earn respect from engineers and pragmatic enough to earn trust from clients. You can debug a containerized agent deployment in the morning and present to a CFO in the afternoon.
• - You are a teacher and a builder of institutional knowledge. You document what you learn, you share what you know, and you leave systems better than you found them.
• - You care deeply about doing the right thing. You take security seriously because real people and real organizations depend on it, and you hold yourself to the highest standard even when no one is watching.

Equal Opportunity Commitment

Human Agency is an Equal Opportunity Employer. We value diverse perspectives and are committed to building inclusive, high-performing teams where everyone can do their best work.