AI Security Controls Lead

United States Digital Space LLC; San Francisco, Washington (CA, District of Columbia); Hybrid; USD 270,000 - 345,000; Full time

Job summary

United States Digital Space LLC in San Francisco is seeking a Security GRC professional to drive autonomous AI control frameworks across regulatory obligations (SOX, ISO 27001/42001, HIPAA) within the software development lifecycle. You will translate regulatory language into concrete acceptance criteria and collaborate with Security, Internal Audit, and Engineering.

You will design and validate controls, lead audit workflows, and guide evidence collection and framework mapping to ensure

Qualifications

• Bachelor's degree or equivalent combination of education, training, and/or experience.
• Engineering fluency with ability to read code and Terraform; understand CI/CD pipelines end-to-end.
• Programming skills in Python or at least one systems language (Go, Rust, or C/C++).
• Familiarity with developer platforms, release engineering, or infrastructure control domains.

Responsibilities

• Define the control framework and requirements for autonomous AI operators in collaboration with Security, Internal Audit, and Engineering; assess implementations against those requirements.
• Pressure-test major infrastructure, system, and agent framework changes for control impact during design.
• Set the compliance bar for home-built systems; define auditable, segregated duties, and change control from day one.
• Define criteria for where/when AI can operate, supplement, or replace manual processes; specify human-in-the-loop thresholds and evidenceDocumentation.
• Establish validation, evidence, and governance standards to withstand external audits and regulatory scrutiny.
• Assess new compliance frameworks and changes in scope; provide technical and compliance lens before commitments.
• Stand up or advise on audit workflows, including Claude-driven testing, automated evidence collection, and framework mapping against common controls.

Education

Bachelor's degree

Tools

Terraform

Job description

United States Digital Space LLC in San Francisco is seeking a Security GRC professional to drive autonomous AI control frameworks across regulatory obligations (SOX, ISO 27001/42001, HIPAA) within the software development lifecycle. You will translate regulatory language into concrete acceptance criteria and collaborate with Security, Internal Audit, and Engineering.

You will design and validate controls, lead audit workflows, and guide evidence collection and framework mapping to ensure