Head of Security | Series B AI Startup

evoke; San Francisco (CA); Presencial; USD 180 000 - 250 000; Tempo integral

Resumo da oferta

evoke is seeking a Head of Security & Compliance to own security, privacy, and IT in Sunnyvale, CA. This on-site leadership role starts hands-on as a team of one and scales with the company’s growth, collaborating closely with engineering leadership and sales to protect data and enable deals.

The ideal candidate has 8+ years across security, compliance, and IT, with practical experience in SOC 2 Type II, ISO 27001, and government/regulatory frameworks; strong IaC on AWS, and a track record with

Qualificações

• 8+ years across security, compliance and IT.
• Hands-on with SOC 2 Type II and ISO 27001; certifications such as FedRAMP, CMMC or HIPAA.
• Experience selling into enterprise, government or regulated industries.

Responsabilidades

• Own compliance end to end, starting with SOC 2 Type II and ISO 27001: controls, evidence, policies, auditors and remediation.
• Lead the path to the frameworks government and enterprise customers ask for, such as FedRAMP, CMMC and HIPAA.
• Join customer security calls, answer questionnaires and build a trust centre so sales can close faster.
• Implement controls hands-on, using infrastructure as code on AWS plus scripting and automation.
• Own privacy and data retention controls for sensitive customer data.
• Own IT processes and vendors (identity, SSO, MFA, device management, joiners and leavers)

Conhecimentos

Security expertise

Compliance management

Customer interaction

IT experience

Formação académica

ISO 27001 certified

FedRAMP/CMMC/HIPAA certifications

Ferramentas

Terraform

AWS

Python

Bash

Descrição da oferta de emprego

Head of Security & Compliance - Sunnyvale, CA (On-site) | Series B AI Startup

We’re working with a fast-growing, Series B-backed AI company using computer vision and multimodal LLMs to build software and connected devices for enterprise and public sector customers.

The company was founded by experienced technical founders, is backed by leading VCs, and sells into some of the most security-conscious buyers there are, including government agencies, healthcare, education and Fortune 500 companies.

The role: This is the company’s first dedicated owner of security, compliance and IT, reporting into engineering leadership. Every customer asks how their data is protected, and your job is to make sure security never blocks a deal. You’ll start hands-on as a team of one, with the opportunity to build out the function as the company grows.

You’ll:

• Own compliance end to end, starting with SOC 2 Type II and ISO 27001: controls, evidence, policies, auditors and remediation
• Lead the path to the frameworks government and enterprise customers ask for, such as FedRAMP, CMMC and HIPAA
• Join customer security calls, answer questionnaires and build a trust centre so sales can close faster
• Implement controls hands-on, using infrastructure as code on AWS plus scripting and automation
• Own privacy and data retention controls for sensitive customer dataOwn IT processes and vendors (identity, SSO, MFA, device management, joiners and leavers), setting the process rather than running a help desk

What we’re looking for:

• 8+ years across security, compliance and IT, ideally starting out in engineering
• Personally led certifications beyond SOC 2, such as ISO 27001, FedRAMP, CMMC or HIPAA
• Hands-on technically: Terraform or Pulumi, AWS, Python or Bash
• B2B experience selling into enterprise, government or regulated industries
• Comfortable with customers, sales and the detail work that comes with compliance
• Bonus: Vanta, or security work on hardware or IoT devices