Chief Information Security Officer

The Company

We're a NYC-based long/short equity hedge fund managing capital for a small group of limited partners.

Stage & proof points:

• ~25 employees
• ~15 years old

‍

The Work

Our CTO oversees security for the firm, but it's becoming too much to handle as the firm's use of AI increases and the pace of AI accelerates in general.

Specifically, you'll:

• Review and provide feedback on our draft AI security framework
• Vet AI tools before we turn them on, from MCP servers and connectors in our sandbox to new AI features our existing vendors ship
  
  • Dig into where inference runs, whether our data is retained, and how the connection to the model is secured
  • Write up findings so we can decide whether to accept the risk
  • Re-review tools as they ship changes, since AI features change frequently
• Review new skills before they go out to the team
• Track new attack vectors as they emerge and tell us what our framework needs to cover
• Help our Chief Compliance Officer respond to occasional regulator and LP questions on AI use
• Work directly with our CTO, plus others on the leadership team

‍

About You

You MUST have:

• Owned security as a CISO or similar for other small firms in a highly regulated industry (e.g. financial services, healthcare, biotech, etc.)
• Recent, hands-on security work with agentic AI architecture
  
  • MCP servers, connectors and extensions, egress allowlists, agent tool permissions, skill and package supply chain, and where inference actually runs
• Done vendor security diligence for AI products
• A finger on the pulse of the AI security landscape, and are closely following how it is evolving

Nice-to-haves:

• Experience with registered investment advisors
• Based in the NYC area