Head of Security & Compliance

Wintermeyer Ventures; San Francisco (CA); On-site; USD 200,000 - 300,000; Full time

Job summary

Wintermeyer Ventures is seeking a security leader to head security engineering and compliance for an AI-powered fintech platform serving lenders. You will work with Engineering, Product, GTM, and Legal to protect AI-driven workflows and scale security as the business grows.

You will own the security program from threat modeling and vulnerability management to SOC 2, SOC 1, and ISO 27001, while mentoring a team of engineers and shaping secure software practices across the organization.

Qualifications

• 5–10 years in security engineering with 2+ years in B2B tech or regulated industries.
• Hands-on coding and strong background in security engineering, app security, web security, SDLC, and DevSecOps.
• Experience owning SOC 2 Type II and/or ISO 27001 compliance.
• Leadership experience mentoring teams or leading security initiatives.

Responsibilities

• Build application security, IAM, and threat detection tools integrated into engineering workflows.
• Lead and mentor application security engineers; advance secure SDLC and vulnerability management.
• Partner with Engineering and Product to secure AI workflows, protect data, and manage agent identities.
• Own and expand the compliance roadmap, including SOC 2, SOC 1, and ISO 27001, with GTM and Legal teams.
• Develop detection and incident response capabilities, lead incident response, and drive improvements.
• Investigate and remediate security issues directly in the codebase.

Skills

Security engineering

Application security

DevSecOps

Threat modeling

Leadership

Mentoring

Coding

Job description

About the Role

Lead security engineering and compliance for an AI-powered financial technology platform serving the lending industry. You will work closely with Engineering, Product, go-to-market, and Legal to protect AI-driven workflows, build customer trust, and scale security practices alongside the business.

What You'll Do

• Build practical application security, identity and access management, and threat detection tools that fit naturally into engineering workflows.
• Lead and mentor application security engineers while advancing secure SDLC, threat modeling, and vulnerability management.
• Partner with Engineering and Product to secure AI workflows, protect data, address AI-specific vulnerabilities, and manage agent identities safely.
• Own and expand the compliance roadmap, including SOC 2, SOC 1, and ISO 27001, in partnership with go-to-market and Legal teams.
• Develop detection and incident response capabilities, lead incident response, and turn lessons learned into lasting improvements.
• Investigate and remediate security issues directly in the codebase.

What We're Looking For

• Five to ten years of security engineering experience, including at least two years in B2B technology or experience in a regulated industry such as fintech or legal technology.
• Hands-on coding experience and a strong background in security engineering, application and product security, web security, secure SDLC, and DevSecOps.
• Experience owning SOC 2 Type II and/or ISO 27001 compliance.
• Leadership experience as a security lead, founding security engineer, or Head of Security, with the ability to mentor and grow a team.
• A software engineering or full-stack background is valued, as is active participation in the security community.

Compensation & Benefits

Base salary: $200,000 to $300,000 annually. Visa sponsorship is available.

Location

On-site in California, United States. Candidates must be able to work on-site in the San Francisco Bay Area.