Head of Security, IT & AI Governance

Obligo, Tel Aviv

The role

Obligo is looking for a Head of Security, IT & AI Governance to own security and IT end to end. You will set the strategy, lead the team, and also roll up your sleeves to deploy, configure and investigate yourself. You will secure a fintech that handles open-banking and sensitive financial data, and an AI-powered product and workforce, from day one.

What you will do

Own security and IT strategy. Define and execute the multi-year security and IT roadmap, budget and scorecards, and communicate risk clearly to leadership, customers and auditors.
Secure our AI footprint. Improve our AI security and governance program covering AI tools used by employees (approved-tool lists, shadow-AI discovery, data-leakage controls) and AI built into our product (prompt injection, sensitive-data disclosure, excessive agency of AI agents, MCP/tool and model supply-chain risk, vector/RAG data exposure). Align with OWASP LLM Top 10, NIST AI RMF and ISO 42001.
Strengthen security monitoring and Zero Trust controls. Continuously improve detection, response and access security across AWS, Google Workspace, endpoints and SaaS. Work hands-on with SIEM and SASE / Zero Trust technologies to refine logging, detection rules, alert triage and incident response, and strengthen access and data protection through SSO/MFA, device posture, ZTNA, SWG, CASB and DLP.
Lead SOC 2 and compliance. Own SOC 2 readiness, audits and continuous monitoring (using Drata). Be the face of security in customer due diligence and questionnaires.
Run cloud and application security. Harden AWS and Google Workspace, manage vulnerability management, annual penetration tests, secure code review, secrets and IAM hygiene, and work with R&D to embed security in the SDLC.
Run IT operations. Own employee onboarding/offboarding, device management and hardening, software procurement, and the IT ticketing function with clear SLAs.
Manage vendor and third-party risk. Run security reviews of vendors and third parties, including AI vendors, and keep the vendor inventory current.
Improve security awareness. Run an ongoing security awareness program for all employees, including phishing simulations and training.
Be hands-on. Investigate alerts, write detections and automation, configure tooling and respond to incidents yourself, while leading and growing the team (today a SecOps engineer, and external IT company) and managing vendors.
Co-lead risk. Serve as the primary technology-risk voice on the Obligo Risk Committee, working closely with R&D, Legal and Operations leadership.

Head of Security, IT & AI Governance

The role

Head of Security, IT & AI Governance

The role

What you will do

What you need

Pay and benefits

About Obligo

Why join us

About Obligo

Similar jobs at other companies

Security Engineer

Technology Delivery Lead: Cyber Security

AI Security & Governance Engineer

Staff Security Engineer - AI Enablement

Security Engineer

Security Engineer

Interview questions

Obligo