Top 13 Head of security Jobs in Boston, Ma

Head of GRC (Governance, Risk, & Compliance)
Blitzy —Cambridge, MA
- $220,000 - $260,000 a year
- Full-time
- Google Workspace
- Office
- Senior level
Quick Apply
Head of Security
Blitzy —Cambridge, MA
- $220,000 - $260,000 a year
- Full-time
- Computer science
- Computer Science
- Doctor of Philosophy
Quick Apply
Chief Information Security Officer (CISO)
MIT —Cambridge, MA
- $325,000 - $375,000 a year
- Full-time
- Hybrid work
- 5 years
- Master's degree
- Bachelor's degree
Chief Information Security Officer (CISO)
Bitsight —Boston, MA
- $280,000 - $375,000 a year
- Full-time
- Azure
- Office
- AWS
- Paid parental leave
- Disability insurance
Quick Apply
Chief Information Security Officer (CISO) - AI Trainer
DataAnnotation —Boston, MA
- $50 - $100 an hour
- Part-time
- English
- Bachelor's degree
- Senior level
- Flexible schedule
Quick Apply
Head of Workforce Authentication Services, MD
State Street —Boston, MA
- $170,000 - $282,500 a year
- Full-time
- Bachelor's degree
- Senior level
- Leadership
- Disability insurance
- Health insurance
Virtual Chief Information Security Officer (vCISO)
iCorps —Woburn, MA
- Full-time
- Senior level
- Leadership
- Communication skills
Quick Apply
Head of Cloud Security Engineering
State Street —Quincy, MA
- $120,000 - $217,500 a year
- Full-time
- Azure
- AWS
- Mentoring
- Disability insurance
- Health insurance
Virtual Chief Information Security Officer (vCISO)
iCorps Technologies —Woburn, MA
- Full-time
- Azure
- Computer Science
- HIPAA
Senior Director, Chief Information Security Officer
Scholar Rock —Cambridge, MA
- $245,000 - $325,000 a year
- Computer Science
- System design
- 11+ years
1d
Chief Information Security Officer
Imprivata —Waltham, MA
- Full-time
- Hybrid work
- Azure
- Computer Science
- HIPAA
Project Lead – Chief Digital and Artificial Intelligence Office (CDAO)
The MITRE Corporation —Bedford, MA
- Full-time
- Hybrid work
- 5 years
- Bachelor's degree
- Doctor of Philosophy
20h

Other jobs to consider

Find your next job by exploring related positions.

Head of Workplace Operations & Experience - Americas
LEGO —Boston, MA
Provide strategic oversight of Integrated Facility Management (IFM) partners, driving service excellence, contractual performance, innovation and value across…
$150,921 - $226,381 a year
8d
Founding Head of Product
Workshop Hiring —Boston, MA
You will write specs, run research, define success metrics, make hard prioritization calls, and work closely with engineering to ship.
$175,000 - $200,000 a year

I want to receive the latest job alert for head of security in boston, ma

By signing in to your account, you agree to SimplyHired's Terms of Service and consent to our Cookie and Privacy Policy.

Explore jobs in more locations

head of security jobs near boston, ma

Chief Information Security Officer jobs in Boston, MA

Chief Information Security Officer jobs in Cambridge, MA

Ai Architect jobs in McLean, VA

Chief Information Security Officer jobs in Woburn, MA

Police Officer jobs in Gary, IN

Chief Information Security Officer jobs in Melville, NY

Chief Information Security Officer jobs in Milwaukee, WI

Chief Information Security Officer jobs in Chantilly, VA

Chief Nursing Officer jobs in Alabama

Chief Information Security Officer jobs in Tennessee

Security Officer jobs in Virginia Beach, VA

Transportation Security Officer jobs in Seatac, WA

Chief Information Security Officer jobs in Hawaii

Chief Information Security Officer jobs in St. Louis, MO

Chief Information Security Officer jobs in Philadelphia, PA

Chief Financial Officer jobs in Honolulu, HI

Chief Information Security Officer jobs in Austin, TX

Probation Officer jobs in Arizona

Chief Information Security Officer jobs in Ashburn, VA

Chief Information Security Officer jobs in Los Angeles County, CA

Head of GRC (Governance, Risk, & Compliance)

Blitzy
Cambridge, MA

Quick Apply

Job Details

Full-time
$220,000 - $260,000 a year

Qualifications

Information security audit implementation
Governance, risk, and compliance (GRC) software
Vendor compliance management
Vendor relationship management
Cloud compliance
Information security auditing

Full Job Description

About Blitzy

Blitzy is a Cambridge, MA based AI software development platform on a mission to revolutionize the software development life cycle by autonomously building custom software to unlock the next industrial revolution. We're transforming how enterprises build software, turning enterprise requirements into production-ready code with an agentic software development platform that can autonomously execute 80% of the quantum of software development work. We're backed by multiple tier 1 investors, and have proven success as founders of previous start-ups.

Location: 1 Kendall Square, Cambridge, MA (On-site)

Compensation: $220,000 - $260,000 plus bonus and equity, commensurate with experience

The Role

Security and compliance at Blitzy currently run on a patchwork: a Security Delegate managing our frameworks with help from an external compliance vendor, backend engineers pulled off their real jobs to answer security questions, and audit evidence assembled after the fact instead of built in from the start.

We're hiring one person to fix that. As Head of GRC, you'll own a compliance program that's audit-ready by design, not by scramble.

To be clear about scope, this role is not:

A paperwork-only compliance role with no rigor.
A job where you escalate every auditor question to engineering or to the Security Delegate.
A way to move our current reactive compliance model in-house unchanged — the point is to make it proactive.

What Success Looks Like

You spot the gap — like SSO being “available” but not “enforced” — before an auditor finds it, not after.
You've personally run a SOC 2 Type II or ISO 27001:2022 cycle and know exactly what auditors sample.
You own Vanta (or an equivalent GRC platform) as the single source of truth, not a reference tool.
You manage auditors and compliance partners directly, without needing anyone to run interference for you.
Engineers stop getting pulled into compliance busywork because you've taken security scope questions and screenshot requests off their plate.
You write clearly — policies, audit narratives, and questionnaire responses that hold up under scrutiny.

Areas of Ownership

Proactive Compliance & GRC Ownership

Own Vanta (or equivalent) as the system of record — configuring tests and keeping evidence current, not just checking a dashboard.
Run SOC 2 Type II and ISO 27001:2022 compliance building continuously toward what auditors actually sample, rather than scrambling before the audit window opens.
Manage auditor and partner relationships directly, including firms like Insight Assurance and FedRAMP platform partners such as Second Front Systems/Game Warden — without routing every conversation through the Security Delegate.
Build the compliance processes that don't exist yet, starting with a formal sub-processor change communication process, which is already coming up as a contractual requirement in enterprise deals.
Evaluate evidence critically rather than take it at face value, confirming, for example, that SSO is enforced via admin panel configuration — not just available in a settings screen.

Required Experience

Personal, hands-on ownership of at least one full SOC 2 Type II or ISO 27001:2022 audit cycle — not just adjacent to one.
Direct experience running a GRC/compliance platform (Vanta or equivalent) as the system-of-record owner.
A track record of managing vendor and auditor relationships independently, without hand-holding.
The seniority and judgment to reduce engineering interrupt load, not add to it — engineers should be comfortable handing things off to you, not double-checking your work.

What Makes You Stand Out

FedRAMP exposure, even at Moderate — we're targeting FedRAMP High.
A track record of building a compliance process from scratch, not just running an existing playbook.
Experience managing multiple frameworks concurrently — SOC 2, ISO 27001, and GDPR at the same time.
Familiarity with Google Workspace as an identity provider.
GDPR/data privacy program experience — cookie consent, Article 27 representative coordination, DPA review.

What Makes This Role Different

You'll have direct ownership of a function that's currently split across engineering, a Security Delegate, and an external vendor — with full autonomy to build it right from day one. That includes a seat at the table on FedRAMP, one of the most demanding compliance programs a company can pursue.

Our interview process reflects the role itself: an audit walkthrough round where you'll talk through a real SOC 2 or ISO 27001 cycle you've run and how you handled your findings.

Our Culture

Who we are:

Led by two pioneering co-founders we are one of the fastest growing companies in the U.S., creating our own category of enterprise autonomous software development. We automate thousands of hours of software development for our customers, which includes strong representation within the Fortune 500.

How we work:

We move Blitzy Fast: Time is both our company's and our clients' most precious asset. We move quickly and decisively to innovate internally and deliver exceptional software externally.

Championship Mindset: We operate like a professional sports team. We win as a team by holding ourselves and each other to high standards, collaborating in-person, and remaining focused on the mission.

Passion for Invention: We're pushing the frontier of what's possible, requiring constant innovation and iteration.

We Work for the Customer: We focus on delivering outsized value to the customers we work with and expanding those relationships into deep, meaningful partnerships.

We believe in being 'everyday athletes'—taking care of ourselves so we can bring our best minds to work. We promote great sleep, movement, and restorative activities for optimal mental performance. It makes for a happier and more productive team.

Blitzy is an equal opportunity employer committed to building a diverse and inclusive team. We believe different perspectives make us stronger.

Quick Apply

Refine Your Search

head of security jobs in boston, ma

Head of GRC (Governance, Risk, & Compliance)

Head of Security

Chief Information Security Officer (CISO)

Chief Information Security Officer (CISO)

Chief Information Security Officer (CISO) - AI Trainer

Head of Workforce Authentication Services, MD

Virtual Chief Information Security Officer (vCISO)

Head of Cloud Security Engineering

Virtual Chief Information Security Officer (vCISO)

Senior Director, Chief Information Security Officer

Chief Information Security Officer

Project Lead – Chief Digital and Artificial Intelligence Office (CDAO)

Other jobs to consider

I want to receive the latest job alert for head of security in boston, ma

Explore jobs in more locations

Job Seeker Tools

Employer Tools

Browse

Stay Connected