The Head of Security & AI Governance reports to the CTO and works onsite Monday through Friday at Marina del Rey, CA. Flip provides Voice AI solutions used by hundreds of brands across retail and healthcare, ranging from Under Armour and Tory Burch to Experity and Fast Pace Health, handling millions of phone calls with their customers every month. The company is a team of 50 with offices in NYC, LA, and the UK. Security and compliance are core to how Flip operates rather than treated as afterthoughts. As customers entrust AI to represent their brand and interact with their customers, the security and trust model must advance accordingly. This role requires a hands-on leader to oversee Flip's security, compliance, IT, and AI governance program during scaling. It is not suited for someone who wants to merely answer questionnaires, manage audit calendars, or work only at a strategic altitude of 30,000 feet. The person must define the direction of AI governance while also building the systems, controls, and processes needed today. They should move fluidly between customer security calls, SOC 2 controls, Okta and access governance, internal IT operations, AI risk, vendor diligence, and emerging concerns around LLM security, prompt injection, red teaming, data boundaries, logging, retention, and model risk. Rather than simply responding to security questionnaires, the person should identify when a questionnaire asks the wrong questions and help define the correct ones. Responsibilities include SOC 2, HIPAA readiness, audit evidence, access reviews, and security controls; customer security diligence, questionnaires, trust materials, and vendor reviews; internal IT and security operations with full stack involvement; AI governance frameworks covering data flows, model/vendor risk, prompt injection, jailbreaks, evals, logging, retention, and customer data boundaries; security policies, runbooks, training, incident response, and internal control documentation; access governance, admin policies, role-based access, and separation of duties across IT, Engineering, DevOps, and business systems; external security and trust conversations with enterprise customers and prospects; and selection and management of tools, MSPs, and vendors to enable secure scaling. Qualifications include 6+ years across security, compliance, IT operations, GRC, infrastructure security, or corporate systems; experience owning or materially operating a SOC 2 program; experience with MDM, endpoint security, device lifecycle, SaaS access governance, and internal IT operations; comfort working cross functionally between engineering, sales, and other functions; the ability to speak credibly with enterprise customers about security, compliance, and trust; strong judgment, high attention to detail, and low tolerance for sloppy access or unclear ownership; and curiosity and fluency around AI governance, LLM security, data boundaries, model/vendor risk, red teaming, and emerging enterprise trust expectations. A builder mindset is needed: designing policies, implementing workflows, chasing evidence, cleaning up processes, and improving them over time. This role suits someone who wants to address the whole problem. On some days, that involves joining a strategic customer call about AI governance. On other days, it means tightening an access workflow, cleaning up an Okta group, improving audit evidence, managing a vendor, or building a process that does not yet exist. The person will not inherit a perfect system but will build one. Those seeking a narrow GRC role should consider other opportunities. Those wanting to help define the trust model for AI-native software while doing practical work to keep a fast-growing company secure are welcome to apply. Flip is international, with teams across the US, UK, and Canada. The company has raised $30M+ to date, including a recent $20M Series A. Investors include Ridge, Next Coast, ScOp, Bullpen Capital, Data Point, Forum Ventures, and founders and executives from companies such as Amazon Alexa, Ada, Attentive, and Simon Data. Benefits include comprehensive healthcare and unlimited vacation, with company-wide time off around July 4 and the end of the year. Flip maintains an in-office culture, believing the best work happens when ambitious people build together. Customers span the globe, as do the offices. Flip is committed to providing equal employment opportunities for all employees, applicants, and covered individuals regardless of protected characteristics, aiming for a company as diverse and inclusive as its customers.

Head of Security & AI Governance

Deskripsi Pekerjaan

Ringkasan

Sumber & keterlacakan data

Lowongan Terkait Lainnya

Staff Software Engineer

Staff Software Engineer

IT GRC Analyst

DevSecOps Engineer/Lead