Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 8 hours agoWe saw it 104 min after it went up

Head of Security, IT & AI Governance

Obligo4 open roles

Where
Tel Aviv
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowHead of Security, IT & AI GovernanceObligo · Tel Aviv

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Obligo's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

10.7% of postings close within 7 days. Measured by our own scanner across the market. Obligo postings stay open a median of 26 days.

Share of postings closed within
  1. 2.0%1 day
  2. 4.4%3 days
  3. 10.7%7 days
  4. 16.1%14 days
  5. 34.1%30 days
This job: posted 8 hours ago

Obligo median: 26 days open

The posting

Head of Security, IT & AI Governance

Obligo is looking for a Head of Security, IT & AI Governance to own security and IT end to end. You will set the strategy, lead the team, and also roll up your sleeves to deploy, configure and investigate yourself. You will secure a fintech that handles open-banking and sensitive financial data, and an AI-powered product and workforce, from day one.

What you will do

  • Own security and IT strategy. Define and execute the multi-year security and IT roadmap, budget and scorecards, and communicate risk clearly to leadership, customers and auditors.
  • Secure our AI footprint. Improve our AI security and governance program covering AI tools used by employees (approved-tool lists, shadow-AI discovery, data-leakage controls) and AI built into our product (prompt injection, sensitive-data disclosure, excessive agency of AI agents, MCP/tool and model supply-chain risk, vector/RAG data exposure). Align with OWASP LLM Top 10, NIST AI RMF and ISO 42001.
  • Strengthen security monitoring and Zero Trust controls. Continuously improve detection, response and access security across AWS, Google Workspace, endpoints and SaaS. Work hands-on with SIEM and SASE / Zero Trust technologies to refine logging, detection rules, alert triage and incident response, and strengthen access and data protection through SSO/MFA, device posture, ZTNA, SWG, CASB and DLP.
  • Lead SOC 2 and compliance. Own SOC 2 readiness, audits and continuous monitoring (using Drata). Be the face of security in customer due diligence and questionnaires.
  • Run cloud and application security. Harden AWS and Google Workspace, manage vulnerability management, annual penetration tests, secure code review, secrets and IAM hygiene, and work with R&D to embed security in the SDLC.
  • Run IT operations. Own employee onboarding/offboarding, device management and hardening, software procurement, and the IT ticketing function with clear SLAs.
  • Manage vendor and third-party risk. Run security reviews of vendors and third parties, including AI vendors, and keep the vendor inventory current.
  • Improve security awareness. Run an ongoing security awareness program for all employees, including phishing simulations and training.
  • Be hands-on. Investigate alerts, write detections and automation, configure tooling and respond to incidents yourself, while leading and growing the team (today a SecOps engineer, and external IT company) and managing vendors.
  • Co-lead risk. Serve as the primary technology-risk voice on the Obligo Risk Committee, working closely with R&D, Legal and Operations leadership.

What we are looking for

  • 5+ years in security and IT, including 2+ years in a leadership role at a cloud-native, fast-growing company (fintech or SaaS an advantage).
  • Proven, hands-on experience working and implementing tools such as a SIEM (e.g. Splunk, Sentinel, Elastic, Wazuh, Panther, Sumo Logic) and a SASE or modern Zero Trust stack, including ZTNA/SWG (e.g. Zscaler, Netskope, Cloudflare, Palo Alto Prisma).
  • Deep, current knowledge of AI security risks and controls, for both employee use of AI and AI-powered products, including agentic AI and LLM-specific threats.
  • Direct experience leading SOC 2 (Type II) readiness and audits end to end, ideally with a compliance automation platform. ISO 27001, PCI or similar is a plus.
  • Strong AWS and Google Workspace security background: IAM, network, logging, endpoint management (MDM/EDR) and SSO/MFA.
  • Real management skills: Led technical people, and you are equally comfortable running the keyboard yourself.
  • Excellent communication in English; able to translate risk into business language for executives, auditors and customers.
  • Calm under pressure, structured, ownership-driven, and comfortable with ambiguity in a startup environment.

Nice to have: relevant certifications (CISSP, CISM, CCSP, OSCP, AWS Security Specialty, AI security certifications), experience with security automation and scripting, and experience in a regulated financial environment.

Why join us

  • Real ownership, with the mandate and budget to build the program properly.
  • Greenfield work on modern problems: SIEM, SASE/Zero Trust and AI security, instead of maintaining legacy systems.
  • A collaborative, high-energy team in our Tel Aviv office.

About Obligo

Obligo is the simplest way to establish trust between renters and landlords. Harnessing open banking, big data and AI, Obligo acts as a trusted third party that frees landlords and renters from the burden of security deposits. Our R&D center is based in Tel Aviv, and we are backed by leading VCs including 83North, 10D and Entrée Capital. [Update with latest company facts, size and funding.]

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Obligo's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Obligo's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Obligo's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.