Alloy Therapeutics, Inc.

• Own Alloy's security program in its entirety • Design and implement IAM controls that enforce least-privilege • Run a structured vulnerability management program • Maintain Alloy's information security policy landscape • Own our SOC 2 type designations • Design and implement IAM controls • Own Alloy's approach to protecting proprietary scientific data • Maintain visibility across Alloy’s environment through logging, alerting, and monitoring tooling • Work closely with Alloy's AI teams to ensure security in AI-forward environment • Evaluate new SaaS applications and ensure software landscape doesn't introduce unacceptable risk • Design and operate elevated controls for sovereign and government-aligned engagements