Role Overview

You report to the Chief Information & Security Officer (CI&SO), and you own the build and run of our security program company wide.

Aurigo builds mission critical AI native SaaS for capital infrastructure and government. Masterworks, Primus, Essentials and our AI product Lumina are trusted with highly regulated public sector and private sector data across four geographies. We hold SOC 1 and SOC 2 Type II, FedRAMP, GovRAMP and ISO 22301, with ISO 42001 close behind. Bangalore is a Global Capability Centre where global functions are owned and held accountable, and this role is one of them.

Aurigo runs a mature, advanced defense in depth posture. This role takes it further: operating it with greater precision, governing an identity and agent population growing faster than any human one, and using AI to defend at the speed our adversaries now attack.

Key Responsibilities

Vulnerability operations

Own vulnerability management as one operational discipline across product code, dependencies, containers, cloud, endpoints and SaaS. One view, one queue, one owner, with remediation driven through engineering rather than tickets handed across a wall.

AI and agent security governance

Own security governance for AI company wide: an enterprise LLM assistant for all staff, a low code automation platform, and team built agents. Mandatory agent registry and security intake, every agent carrying a named owner, risk tier and approved scope. Nothing reaches production unreviewed.

Identity, endpoint and threat defense

Own identity security across both populations, with non human identity the larger and faster growing.

Product security, cloud and data

Own product security across Masterworks, Primus, Essentials and Lumina, supporting roughly 250 engineers: threat modelling, SAST, DAST and SCA gated in CI, secrets scanning, SBOM, code signing, guardrails on AI coding assistants,  so security moves at the pace of engineering.

Requirements

Candidate Profile

• 14+ years in information and cyber security, including 6+ years leading security teams and at least 2 leading managers or principal level engineers
• You have run vulnerability management as an operational discipline at scale, with published SLAs, risk based prioritization and remediation delivered through engineering.
• Direct experience governing machine and non-human identity, and practical command of AI and LLM security risk with real experience applying AI to security operations rather than only defending against it.
• Hands on depth in at least four of: identity and privileged access; endpoint detection and response and detection engineering; cloud security across AWS and Azure; application and product security; secure access service edge and CASB; data protection.
• You have been incident commander for a material security incident, including the executive and customer communication that came with it

Preferred Experience

• Security leadership for SaaS in government or otherwise regulated markets. CISSP, CISM, CCSP or senior cloud provider credentials.
• Experience building agentic security workflows. Vendor consolidation and negotiation at seven figure scales. 

About Aurigo

Aurigo is an AI-native capital program management platform trusted by over 300 customers managing more than $450 billion in capital programs across North America. With over 40,000 projects delivered, Aurigo helps organisations in transportation, water and utilities, healthcare, higher education, and government plan, build, and manage infrastructure with confidence. Recognised as one of the Top 25 AI Companies of 2024 and a Great Place to Work for three consecutive years, we leverage artificial intelligence to create smarter, more connected outcomes. At Aurigo, we don't just build software — we help shape the future of infrastructure.

 Aurigo Software Technologies is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other characteristic protected by applicable law.