Head of Security & Compliance (AI for Banking)

A fast-growing startup modernizing core banking operations with AI-native software is looking for a hands-on security leader to own application security, compliance and incident response as the company scales.

What you’ll own

• Design security tooling and processes for application security, identity and access, and threat detection that fit naturally into how engineers ship
• Lead and grow a small team of application security engineers while maturing secure development, threat modeling and vulnerability management practices
• Define the security architecture for AI-driven and agentic workflows, with a focus on data privacy and AI-specific risks
• Own the compliance roadmap (SOC 2, SOC 1, ISO 27001) and support customer security reviews alongside sales and legal
• Build the detection pipeline, run point on incidents and turn each one into lasting improvements

Profile

• 5 to 10 years in security engineering, including at least 2 years in B2B tech, ideally in a regulated space such as fintech
• Hands-on coding ability: you dig into the codebase and fix security issues yourself
• Strong grounding in application and product security, secure SDLC, web security and DevSecOps
• A track record of owning SOC 2 Type II and/or ISO 27001 compliance
• Bonus: a software engineering background before moving into security, or prior experience as a security lead or founding security engineer

On-site in San Francisco; relocation support is not offered. Visa transfers considered.