Head of Security & Compliance

Job Description

Job DescriptionAbout the Role

Lead security engineering and compliance for an AI-powered financial technology platform serving the lending industry. You will work closely with Engineering, Product, go-to-market, and Legal to protect AI-driven workflows, build customer trust, and scale security practices alongside the business.

What You'll Do

• Build practical application security, identity and access management, and threat detection tools that fit naturally into engineering workflows.
• Lead and mentor application security engineers while advancing secure SDLC, threat modeling, and vulnerability management.
• Partner with Engineering and Product to secure AI workflows, protect data, address AI-specific vulnerabilities, and manage agent identities safely.
• Own and expand the compliance roadmap, including SOC 2, SOC 1, and ISO 27001, in partnership with go-to-market and Legal teams.
• Develop detection and incident response capabilities, lead incident response, and turn lessons learned into lasting improvements.
• Investigate and remediate security issues directly in the codebase.

What We're Looking For

• Five to ten years of security engineering experience, including at least two years in B2B technology or experience in a regulated industry such as fintech or legal technology.
• Hands-on coding experience and a strong background in security engineering, application and product security, web security, secure SDLC, and DevSecOps.
• Experience owning SOC 2 Type II and/or ISO 27001 compliance.
• Leadership experience as a security lead, founding security engineer, or Head of Security, with the ability to mentor and grow a team.
• A software engineering or full-stack background is valued, as is active participation in the security community.

Compensation & Benefits

Base salary: $200,000 to $300,000 annually. Visa sponsorship is available.

Location

On-site in California, United States. Candidates must be able to work on-site in the San Francisco Bay Area.