Own security and compliance across product, engineering, cloud, vendors, and internal systems.
Build practical security controls around auth, access, secrets, data privacy, infrastructure, and deployments.
Create safe usage guidelines for AI tools, agents, MCP servers, tool calling, and automation workflows.
Run vulnerability management, security reviews, risk assessments, and incident response planning.
Drive compliance readiness for frameworks like SOC 2, ISO 27001, GDPR, or similar.
Help teams handle sensitive data properly, especially when using AI tools and third-party platforms.
Train the team on secure development, AI safety, privacy basics, and common attack patterns.
Bring a startup mindset: fast decisions, clear ownership, practical fixes, and no security theater.

Strong experience in security, compliance, risk, or application/cloud security.
Good understanding of OWASP, cloud security, IAM, secrets management, vulnerability scanning, CI/CD security, and incident response.
Familiarity with compliance frameworks like SOC 2, ISO 27001, GDPR, HIPAA, or similar.
AI-native mindset: you understand the risks around AI tools, agents, MCPs, data leakage, permissions, and prompt/tool misuse.
Product-minded, practical, calm under pressure, and allergic to pointless bureaucracy.

Remote work
Real ownership
Space to build the security function properly
Small team that wants security to be sharp, practical, and built into how we ship.

Security & Compliance Lead

Key skills