Director of Information Security

<div class="content-intro"><p>Efficient Computer is rethinking computing from the ground up to solve one of AI's biggest challenges: energy. Our Fabric architecture delivers a 10–100x improvement in energy efficiency for general-purpose computation, including AI, while supporting familiar programming languages and software frameworks—unlocking new possibilities for autonomous machines, intelligent infrastructure, wearables, and space systems. With our first processor, Electron E1, now shipping in volume and more than $97 million in Series B financing recently announced, we're accelerating customer deployments and scaling our architecture to data center performance. Join us to build the hardware and software that bring intelligence wherever it's needed and help shape the next generation of computing.</p></div><p class="p1">Efficient Computer is looking for its first dedicated security leader. You’ll decide what good security looks like here, and then build it. That means owning how we protect our intellectual property, how we meet the security standards our defense and government customers require, how we handle export-controlled technology, and how our engineering environment is designed and hardened.</p> <p class="p1">At the start, you’ll be a team of one. Alongside the security program, you’ll own information technology end to end: devices, identity, onboarding and offboarding, and the systems that keep a fast-growing, multi-site company running. As we scale, we’ll hire a dedicated IT Manager, and you’ll help bring them on and hand off day-to-day IT operations so you can focus fully on security. If you want to build both functions from the ground up and then decide how they grow, this is that job.</p> <p class="p1">This is a hands-on role. You’ll write and own policy, but you’ll also be in the consoles, the configurations, and the architecture reviews. If you’re looking for a security role run entirely through documents and meetings, this isn’t it.</p> <p class="p2">You’ll sit on our Operations team, report to our Head of Legal and Compliance, and hold a standing seat in engineering architecture review.</p> <p class="p1"><strong>What You’ll Do</strong></p> <p class="p3"><strong>Protect what matters most</strong></p> <ul class="ul1"> <li class="li3">Design and enforce how our source code, compiler toolchain, and hardware designs are protected: classification, encryption, storage, and who can reach what.</li> <li class="li3">Own the access model across our engineering systems: repository permissions, token and credential governance, and recurring access reviews.</li> <li class="li3">Establish controls for sensitive technical data we hold under third-party confidentiality obligations.</li> <li class="li1">Build and maintain the evidence that we take reasonable measures to protect our trade secrets</li> </ul> <p class="p3"><strong>Security engineering and architecture</strong></p> <ul class="ul1"> <li class="li3">Secure a developer-heavy, multi-platform engineering environment where off-the-shelf tooling doesn’t always fit, and make hardening work for engineers rather than against them.</li> <li class="li3">Secure our software supply chain end to end: dependencies, build pipelines, release integrity, and the compiler itself.</li> <li class="li3">Own network and infrastructure security architecture, including build-vs-buy and in-house-vs-managed decisions.</li> <li class="li3">Work with our technology vendors and service providers as a technical peer, not a ticket queue.</li> <li class="li1">Own detection, logging, and incident response, and write the playbooks you’ll run.</li> </ul> <p class="p3"><strong>Compliance</strong></p> <ul class="ul1"> <li class="li3">Own and mature our NIST SP 800-171 and CMMC programs: assessments, system security plans, POA&Ms, SPRS, remediation, and audit readiness.</li> <li class="li3">Lead the security side of customer, partner, and investor diligence, including security questionnaires and government customer reviews.</li> <li class="li1">Establish policies and controls for handling sensitive and controlled information, and train employees on them.</li> </ul> <p class="p3"><strong>Export control</strong></p> <ul class="ul1"> <li class="li3">Own the technical implementation of our export control obligations: access segregation, U.S.-person gating for controlled technology, and deemed export analysis for system and repository access.</li> <li class="li1">Partner with Legal on classification, licensing, and restricted party screening.</li> </ul> <p class="p3"><strong>AI and data governance</strong></p> <ul class="ul1"> <li class="li3">Set and administer how AI tools are used against our most sensitive material: which tools are approved, how they’re provisioned, and how sensitive data stays where it belongs.</li> <li class="li3">Own AI tool spend and seat management, so budget goes where it delivers value (not every task needs a frontier model).</li> <li class="li1">Serve as the company’s data protection and privacy lead.</li> </ul> <p class="p3"><strong>IT operations (to start)</strong></p> <ul class="ul1"> <li class="li3">Own day-to-day IT across all offices: hardware, software, accounts, and access. No ask is too small, and you’ll build systems so the small asks stay small.</li> <li class="li3">Run onboarding and offboarding end to end: provisioning, deprovisioning, access reviews, and equipment lifecycle.</li> <li class="li3"&g