Head of Security & Compliance - AI Startup (On-site)

evoke

San Francisco (CA)

On-site

USD 180,000 - 250,000

Full time

4 days ago

Be an early applicant

Get a reply from this employer

Your resume and cover letter, tailored to exactly what they’re hiring for.

Get past ATS filters

Job summary

evoke is seeking a Head of Security & Compliance to own security, privacy, and IT in Sunnyvale, CA. This on-site leadership role starts hands-on as a team of one and scales with the company’s growth, collaborating closely with engineering leadership and sales to protect data and enable deals.

The ideal candidate has 8+ years across security, compliance, and IT, with practical experience in SOC 2 Type II, ISO 27001, and government/regulatory frameworks; strong IaC on AWS, and a track record with

Qualifications

8+ years across security, compliance and IT.
Hands-on with SOC 2 Type II and ISO 27001; certifications such as FedRAMP, CMMC or HIPAA.
Experience selling into enterprise, government or regulated industries.

Responsibilities

Own compliance end to end, starting with SOC 2 Type II and ISO 27001: controls, evidence, policies, auditors and remediation.
Lead the path to the frameworks government and enterprise customers ask for, such as FedRAMP, CMMC and HIPAA.
Join customer security calls, answer questionnaires and build a trust centre so sales can close faster.
Implement controls hands-on, using infrastructure as code on AWS plus scripting and automation.
Own privacy and data retention controls for sensitive customer data.
Own IT processes and vendors (identity, SSO, MFA, device management, joiners and leavers)