Chief Security & Data Governance Leader

Tonic; United States; Remote; USD 200,000 - 350,000; Full time

Benefits offered by this job

Competitive compensation

Equity

Job summary

Tonic.ai is seeking a Head of Security to own our security program end-to-end, including audits, privacy, vendor risk, and customer security questionnaires.

You'll partner with founders, engineering, legal, and sales to set strategy, drive risk-based decisions, and implement AI governance across product and cloud infrastructure.

You'll lead SOC 2 readiness, oversee cloud security in AWS/GCP/Azure, and mentor a growing security team while protecting customer data.

Qualifications

• Prior leadership of security programs at a B2B software company.
• End-to-end SOC 2 audits ownership.
• Hands-on with AWS, GCP, and Azure IAM and security controls.
• Experience embedding security in the development lifecycle.
• Comfort presenting to customers and executives.
• Experience with corporate security and IT operations.
• AI governance and policy setting experience preferred.
• Self-directed and risk-based decision maker.
• Clear communication across technical and non-technical audiences.

Responsibilities

• Own SOC 2 program end to end and auditor relationships.
• Ensure GDPR/HIPAA alignment with security commitments.
• Embed security into the dev lifecycle from design to release.
• Lead vulnerability management across code and infra.
• Secure cloud environments (IAM, logging, hardening).
• Respond to security questionnaires and RFPs.
• Collaborate with legal on redlines.
• Oversee corporate security and IT operations.
• Manage IAM and vendor risk.
• Set AI usage policies and guardrails.

Skills

Security leadership

SOC 2 governance

Cloud security

Audits & compliance

Security questionnaires

RFP responses

Incident response

Executive communication

Vendor risk management

Education

Bachelor's degree in CS/Engineering

Tools

AWS

GCP

Azure

EDR

IAM policies

Job description

Tonic.ai is seeking a Head of Security to own our security program end-to-end, including audits, privacy, vendor risk, and customer security questionnaires.

You'll partner with founders, engineering, legal, and sales to set strategy, drive risk-based decisions, and implement AI governance across product and cloud infrastructure.

You'll lead SOC 2 readiness, oversee cloud security in AWS/GCP/Azure, and mentor a growing security team while protecting customer data.