Head of Information Security & IT
Yieldstreet
New York City, NYFull-time$215–230K/yrPosted todayStill listed today
Most applications go out cold — see where you stand first. No sign-up to start.
You apply on the employer's site, with no Olive account needed.
Watch jobs like this. New roles like this one near New York City, NY, by email.
Don't just apply. Show up ready.
Olive works from this exact posting.
At a glance
Olive lists jobs from US employers, including remote roles you can work from the United States.
Job overview
Willow Wealth is hiring a Head of Information Security & IT to lead its security and IT functions from its New York City office. Reporting to the General Counsel, the role owns cyber risk, company IT systems and vendors, and board security reporting. It is a hands-on leadership position that will initially lead the IT team and managed security providers, then build both functions as the company grows.
Skills & qualifications
Skills
Qualifications
Benefits
Full job description
About Willow Wealth Willow Wealth is a leading platform for private market investing, connecting individual investors with curated opportunities across real estate, private credit, private equity, and more. Founded in 2015, the platform has grown to serve more than 500,000 members with ~$7B invested since inception. The company has raised over $250M from leading institutional investors, such as Redbird, Tarsadia, Mayfair, StepStone, and Edison Partners.
About the Role Willow Wealth is hiring a Head of Information Security & IT to lead our information security and IT functions. The role will be based in our New York City office and will report to our General Counsel. You will own the firm’s cyber risk, the systems and vendors that run the company IT for our offices in New York and abroad, and how we report security posture to the board. You will also serve as the firm’s designated information security official.
This is a hands-on leadership role at a growing company. You will start by leading our IT team and managed security providers directly, and build out both functions as we grow. The role works closely with Engineering, Legal, Compliance, and the executive team.
Key Responsibilities
- Information Security Program & Compliance - own the security program, policies, and cyber risk, and keep the firm exam- and audit-ready under SEC and FINRA expectations, including Regulation S-P and S-ID
- Board & Leadership Reporting - report on security posture to the board quarterly and to leadership monthly
- Incident Response - lead incident response end to end, including notification decisions with Legal and Compliance, and run an annual tabletop exercise with the executive team
- Vulnerability Management - oversee vulnerability management, including continuous automated penetration testing, with remediation SLAs by severity
- IT Leadership - run IT hands-on with our IT team, and set strategy, standards, and budget for IT and A/V across our offices in New York and abroad
- Partner with Engineering on application security, setting the standard and verifying it is met
- Own the IT and security stacks, vendors, contracts, and renewals, and run security reviews for new and critical vendors
- Oversee our core platforms: AWS for our investor platform, Microsoft Azure and Microsoft 365 for corporate IT, and the security layer around them, including identity and Zero Trust access, device management, managed detection and response, data loss prevention, email and web protection, application security scanning, and account takeover protection
Qualifications
- Bachelor’s degree or equivalent experience; CISSP, CISM, or a cloud security certification preferred
- 7+ years in information security and IT, including several years leading both functions at a financially regulated firm such as a broker-dealer, RIA, bank, or fintech
- Track record of leading real security incidents end to end, including notification decisions
- Experience reporting security posture to a board or executive committee in clear, plain language
- Hands-on experience with the platforms above, especially cloud, identity, endpoint, and data loss prevention
- Experience running IT hands-on with a small team and managing vendors, with the drive to build out the function
- Experience leading a SOC 2 audit or selecting a managed detection and response provider is a plus
- Experience supporting offices outside the US is a plus
What's in it for you: Competitive compensation package, including equity Health, dental & vision coverage with FSA/HSA options Unlimited PTO 401k match Commuter benefit Life insurance Wellness stipend
This is a New York-based role. The base salary range for this position is USD215,000 to 230,000 annually, depending on experience and qualifications. This role is eligible for a discretionary bonus and equity compensation as part of the total compensation package.
How this job compares
Set against the 1,329 open Information Security jobs on Olive Jobs, counted November 12, 2026.
- Pay
- This posting$215–230K/yr
- New York median$128–208K/yr51 salary ranges
- US median$126–210K/yr953 salary ranges
This range's midpoint, $223K, is 33% above the New York median midpoint ($168K) — in the middle half of Information Security salary ranges in New York.
- Openings
- Olive Jobs lists 72 open Information Security jobs in New York and 1,329 across the US. 14% of them nationwide are listed as remote or flexible.
- Hiring the most in New York
- EY5 open
- Capital One4 open
- City of New York4 open
- Experience
- This posting asks for at least 7 years of experience; Information Security postings that state a minimum ask for 7 years at the median (1,168 postings).
- Education
- 327 of the 1,329 open Information Security jobs (25%) ask for a bachelor's degree or higher.
Counted across the open, public US postings on Olive Jobs on November 12, 2026. Pay medians are the middle values of the low ends and of the high ends of postings that list both ends of a range in the same cadence (a yearly salary or an hourly rate); a range's midpoint is halfway between its ends. Pay and experience figures resting on fewer than 20 postings are left out.
Prepare for this role
You've read the whole posting — now see how you match it.
