Head of AI Security & Enterprise Trust

Prophecy; San Francisco (CA); On-site; USD 180,000 - 240,000; Full time

Benefits offered by this job

Health insurance coverage

Discretionary allowance

Flexible PTO

Development allowance

Long Term Disability

Life Insurance

FSA/HSA

Dental

Vision

Ownership of projects

Job summary

Prophecy, a leader in AI-native data preparation, is seeking a senior Security Leader in San Francisco to own end-to-end security, lead a small security team, and drive product, cloud, and corporate security initiatives. You will partner with US and India engineering teams, ensure ISO/IEC 27001 and SOC 2 readiness, and support enterprise customers with strong risk management.

You will shape security strategy, oversee threat modeling for agentic systems, govern AI platforms, and manage identity,

Qualifications

• 10+ years in security, with at least 3 years in product, application, or cloud security at a software company.
• Led a small security or IT team as a player-coach.
• Hands-on experience securing AWS and Kubernetes environments.
• Experience owning ISO/IEC 27001 and/or SOC 2 Type II programs, including audits and ongoing control management.

Responsibilities

• Own Prophecy's security strategy and roadmap across product, cloud infrastructure, and corporate environments.
• Build and scale the security program, including policies, controls, risk assessments, and a clear view of where to mitigate risk and where to accept it.
• Partner with Engineering across the US and India to embed security into how we design, build, and ship our AI agents and data platform.
• Own threat modeling for agentic systems, including tool and permission scoping, prompt injection defenses, credential handling, data isolation between customers, and runtime monitoring.
• Lead AI governance for our agent platform, aligning with EU AI Act and NIST frameworks, including data flows through models and 3rd-party providers.
• Lead application security practices across secure code review, vulnerability management, penetration testing, and secure-by-default engineering standards.
• Secure integrations with Databricks, Snowflake, BigQuery, and other customer data platforms.
• Set guardrails for internal agents: least-privilege access, short-lived credentials, and human approvals for high-risk actions.
• Review new internal agents and AI tools before production, set policy for employee AI use, and extend logging and incident response to agent activity.
• Build agents for the security team, such as automation for questionnaires and alert triage.
• Own the security posture of our AWS and Kubernetes environments, including IAM, secrets management, logging, and detection.
• Build and run incident response from detection to remediation.
• Own ISO/IEC 27001:2022, SOC 1 Type II, and SOC 2 Type II compliance programs and audits.

Skills

Security leadership

Cloud security

AWS

Kubernetes

Compliance management

Education

CISSP or equivalent

ISO/IEC 27001 / SOC 2 experience

Tools

AWS

Kubernetes

IAM

Security incident tools

Job description

Prophecy, a leader in AI-native data preparation, is seeking a senior Security Leader in San Francisco to own end-to-end security, lead a small security team, and drive product, cloud, and corporate security initiatives. You will partner with US and India engineering teams, ensure ISO/IEC 27001 and SOC 2 readiness, and support enterprise customers with strong risk management.

You will shape security strategy, oversee threat modeling for agentic systems, govern AI platforms, and manage identity,