{"id":3602470,"url":"https://alion.io/job/iprally-head-of-security","title":"Head of Security","company":{"id":65622,"name":"IPRally","domain":"iprally.com","url":"https://alion.io/company/iprally","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Teamtailor","truth_index":null},"role":"Leadership","role_family":"Leadership","seniority":"head","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Helsinki, Finland"],"countries":["FI"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"ISO 27001","optional":false},{"name":"ISO 42001","optional":false},{"name":"Platform Engineering","optional":false},{"name":"SOC 2","optional":false},{"name":"EU AI Act","optional":true}],"status":"live","first_seen_at":"2026-11-02T08:35:01Z","employer_posted_date":"2026-11-02","last_verified_at":"2026-11-10T06:10:34Z","board_verified":true,"closed_at":null,"days_open":7,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":7},"description":"IPRally builds AI tools for patent search and analysis. Patent offices, large companies and law firms use our products to work with confidential technical information, often before inventions become public. Protecting that information and earning our customers' trust is fundamental to our business.\nWe hold ISO 27001 certification and a SOC 2 Type II report and already have an established security program. We're looking for a Head of Security to take ownership of it, strengthen our technical security capabilities and help us navigate the evolving security challenges of AI.\nThis is a hands-on role with considerable ownership. You'll work closely with our engineers and other teams, taking responsibility for security priorities while doing much of the technical work yourself. We value practical solutions, good judgment and effective use of automation over adding unnecessary processes.\nWhat you'll do\nOwn and develop our security program. Maintain and improve our ISMS, lead ISO 27001 and SOC 2 audits, manage security risks and support the development of our AI management practices, including ISO 42001.\n\nStrengthen product and application security. Work closely with our engineering teams on secure design, threat modelling, vulnerability management and security testing. Help maintain effective security practices as AI agents take on more implementation work.\n\nImprove cloud and infrastructure security. Partner with Platform Engineering to identify risks, review architecture and access controls, and ensure that security is considered as our infrastructure evolves.\n\nShape how we secure AI. Assess and mitigate risks related to LLMs, AI agents and integrations with customers' tools, including prompt injection, data exposure and excessive permissions. Help establish safe practices for using AI tools internally.\n\nLead security incident readiness and response. Develop our detection and response capabilities, coordinate incidents and ensure that our business continuity and recovery practices remain effective.\n\nBuild and maintain customer trust. Support security reviews, customer audits and questionnaires, work with Legal on relevant regulatory requirements, and oversee vendor security risks.\n\nMake security work smarter. Use AI tools, automation and practical engineering solutions to reduce repetitive work and help a small organisation maintain strong security standards.\n\nYou'll also work with our IT manager on internal security practices and communicate security priorities, risks and progress to company leadership.\nWhat we're looking for\nYou could be a strong fit if you:\nHave at least five years of hands-on experience in security engineering, cloud security, application security or a similar role, ideally in a SaaS or cloud environment.\n\nHave strong technical knowledge of cloud and application security, including authentication, authorization, common vulnerabilities and secure software design.\n\nHave hands-on experience with security frameworks such as ISO 27001 or SOC 2, including audits, and know how to turn compliance requirements into practical security improvements.\n\nHave experience identifying, prioritizing and resolving security vulnerabilities, and have participated in or led security incident response.\n\nUnderstand the security challenges introduced by LLMs and AI agents and can help engineering teams address them.\n\nAre comfortable using AI tools and automation to improve your work without compromising security.\n\nCan work independently, make pragmatic decisions based on risk and drive improvements together with engineering teams.\n\nCommunicate clearly with technical and nontechnical stakeholders, including customers, auditors and company leadership.\n\nNice to have\nExperience leading or developing a security function in a smaller company.\n\nFamiliarity with ISO 42001, NIS2, the EU AI Act or the Cyber Resilience Act.\n\nExperience working with regulated industries, public sector customers or highly confidential data.\n\nKnowledge of search, ML systems or the security of AI powered products.\n\nPractical experience with internal IT security, identity management or device security.\n\nWhy IPRally?\nYou'll join a company where security is already an established priority, rather than something you need to introduce from scratch.\nAt the same time, there's plenty of room to make things better. You'll have direct influence over our security practices, work closely with the people building our products and help us navigate security challenges at the intersection of software engineering and AI.\nWe're small enough that you can make decisions quickly and see the impact of your work across the company.\nLocation: we prefer candidates based in Helsinki or elsewhere in Finland.\nSalary: €6000-7000/month, with equity.","description_format":"text","description_chars":4766,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity"],"hiring_locations":[{"name":"Finland","iso":"FI","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Machine Learning","Custom Software Development"],"lifecycle":[{"event":"open","at":"2026-11-02T10:04:39Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":7,"expected_fill_days":30,"reasons":["conf:0","win:early"],"computed_at":"2026-11-10T06:52:35Z"},"pay":null,"html_url":"https://alion.io/job/iprally-head-of-security","json_url":"https://alion.io/job/iprally-head-of-security.json","meta":{"generated_at":"2026-11-10T08:16:57Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":19163,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-11T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":65622},"rest":"https://alion.io/mcp/rest/get_company?id=65622"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fiprally-head-of-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fiprally-head-of-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fiprally-head-of-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/iprally-head-of-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fiprally-head-of-security"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3602470}},{"tool":"search_jobs","arguments":{"company":"iprally.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3602470},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}