# Security & Trust Lead

**Company:** [Alex](https://hotfix.jobs/companies/alex)
**Location:** San Francisco, CA
**Role:** Security Engineering
**Salary:** $150k – $180k/yr
**Skills:** Information Security, Ai Governance, SOC 2, ISO 27001, Iso 42001, GDPR, Eu Ai Act, Risk Management, Incident Response, Penetration Testing, Cloud Security, Ci/Cd Security, Vulnerability Management, Vendor Risk Management, Access Management
**Posted:** 2026-08-26

> Own Alex’s information security, compliance, AI governance, and enterprise trust program as its first dedicated Security & Trust hire. The role combines security reviews and customer-facing assurance with audits, regulatory readiness, risk management, and technical control development.

## Job Description

## Responsibilities
- Own enterprise customer security reviews, including infosec questionnaires, SIGs, CAIQs, vendor risk assessments, DPAs, and security addenda.
- Build an answer library, evidence repository, and AI-enabled tooling to automate questionnaire responses.
- Track and interpret the EU AI Act, NYC Local Law 144, GDPR, state AI and biometric laws, bias-auditing requirements, and emerging regulations for automated employment decision tools.
- Lead security, information security, and AI governance calls with enterprise prospects and customers.
- Build and maintain the trust center, security whitepapers, and AI governance documentation.
- Own SOC 2 and drive future compliance initiatives, including ISO 27001, ISO 42001, and regional requirements.
- Manage auditors, penetration tests, and compliance-platform tooling.
- Partner with Engineering on access management, vendor and subprocessor reviews, vulnerability remediation, incident response, cloud security, and CI/CD security.
- Maintain the risk register and operate the security program against it.
- Engage Product and Engineering early on new features and model changes to address security, privacy, and AI-governance concerns during design.

## Requirements
- Technical, highly organized, and motivated to develop deep expertise in information security, compliance, and AI risk.
- Ability to own security and compliance programs and communicate effectively with enterprise security teams and customers.
- Ability to work cross-functionally with Engineering, Product, Sales, Operations, and executive leadership.

## Nice-to-haves
- Experience with enterprise security reviews and information-security questionnaires.
- Familiarity with SOC 2, ISO 27001, or ISO 42001.
- Knowledge of AI governance, AI regulation, privacy, or automated employment decision tools.
- Experience with security controls, audit management, penetration testing, risk registers, or compliance platforms.

## Compensation and Benefits
- $150,000–$180,000 annual compensation, plus equity.
- Healthcare, vision, and dental insurance.
- 401(k).
- Unlimited PTO.
- Company-paid lunches and company events.

## Similar jobs

- [GRC Lead](https://hotfix.jobs/jobs/1b5215fb-00e5-49a2-a7f2-6817a14b255f) - Juicebox - San Francisco, CA - $150k – $250k/yr
- [Fraud Intelligence Lead](https://hotfix.jobs/jobs/35d29683-b36d-4c65-a143-3bc124a869ab) - Plaid - New York, NY - $149k – $233k/yr
- [Senior Security Software Engineer, Security Operations](https://hotfix.jobs/jobs/3afac001-b1e8-426c-8a65-56ae5e375464) - Pinterest - Remote - $156k – $320k/yr
- [Senior Security Engineer, Incident Response](https://hotfix.jobs/jobs/c68462e8-6fd9-48ef-99a9-0516fb5468d8) - Twilio - Remote - $142k – $208k/yr
- [Senior Security Engineer](https://hotfix.jobs/jobs/bf99bce1-bf10-4938-81d3-d24f8455171f) - Pindrop - Remote - $140k – $165k/yr

**Apply:** https://hotfix.jobs/jobs/2c665c46-9fc0-42d0-bc34-777fa50c8e6b
**Canonical:** https://hotfix.jobs/jobs/2c665c46-9fc0-42d0-bc34-777fa50c8e6b