opengreenhousefincapital
Head of Platform & Security
Opto Investments
LocationSan Francisco, California, United States, New York, San Francisco
Last observed2026-07-02 08:33:11.766660
Job idfincapital-opto-investments:greenhouse:7719014003
Opto is engineering the future of private markets to improve client outcomes and drive capital to the most transformative ideas. The opportunity is huge. The global alternative investments industry is forecast to grow to $30T by 2029, however the private investment process typically remains opaque, highly manual, and error-prone, which limits access to the select few insiders who are willing to bear the pain. Opto is a revolutionary end-to-end solution for wealth managers of any size- from small investment advisors to large multi-family offices to private banks- to build, fundraise for, and manage private markets programs at scale. We combine exceptional Silicon Valley engineering talent with experienced investors and industry specialists to fix this broken system through the power of technology. Our platform banishes the nightmare of slide decks, spreadsheets, and paperwork to the past, and arms our clients with the tools, data, and guidance to identify and access the right opportunities for their clients. Fixing private markets will not be easy and demands courage, but we’re not afraid to do things differently. We are unapologetically bold. We value strong opinions, clear communication, and purposeful execution. Up for the challenge? Come join us. The Role The Head of Platform & Security is a hands-on technical leadership role responsible for the reliability, security, and operational excellence of Opto's technology platform. This is not a CISO or executive security strategy role. You will spend up to 50% of your time as a direct technical contributor — writing code, building and operating infrastructure, and doing the work alongside your team. You will partner with the CTO to define and execute Opto's security strategy while leading a team of four engineers spanning infrastructure, security, DevOps, and internal IT. You will own our enterprise and application security program end-to-end and lead a four-person platform engineering team spanning infrastructure, security, DevOps, and internal IT. You will partner closely with engineering leadership, legal, and executive stakeholders to ensure that Opto's platform meets the highest standards demanded by our clients — wealth managers and financial institutions who entrust us with highly sensitive data. This is a player-coach role. You will manage the team and also contribute directly as an engineer. Candidates who have transitioned fully into executive or strategic leadership and no longer write code, build infrastructure, or operate systems hands-on are not the right fit. This is a pivotal leadership role at a critical stage of Opto's growth. You will take ownership of an established security program and drive it forward — hardening policies, processes, and tooling, raising the bar on compliance maturity, and ensuring the platform engineering team delivers the reliability and operational excellence the program demands. Our Tech Stack Our tech stack consists of React-based Next.js TypeScript applications backed by Python REST API services. Our infrastructure is managed as code, orchestrated with Kubernetes on AWS (EKS), and deployed via automated CI/CD pipelines. Our tech stack continues to evolve, driven by our shared principles of optimizing for modularity, scalability, and team-level service ownership. Expectations Security Leadership Own Opto's enterprise and platform security posture across all applications, services, business tools, and processes Maintain Opto's SOC 2 Type II audit reports, ensuring ongoing compliance and readiness for annual assessments Own and continuously improve programs for security incident management, vulnerability management, penetration testing, network security, authentication and authorization, system access control, data privacy and governance, encryption and certificate management, and threat detection Define and monitor compliance with internal security policies, including MDM, SSO/MFA/RBAC, VPN/zero trust, and data governance Partner with Le
This page is generated from the committed OpenOpps static snapshot. Use the source posting or apply link for the employer's current canonical posting state.