Security & Compliance Director, FinTech AI

Wintermeyer Ventures; San Francisco (CA); On-site; USD 200,000 - 300,000; Full time

Job summary

Wintermeyer Ventures is seeking a security leader to head security engineering and compliance for an AI-powered fintech platform serving lenders. You will work with Engineering, Product, GTM, and Legal to protect AI-driven workflows and scale security as the business grows.

You will own the security program from threat modeling and vulnerability management to SOC 2, SOC 1, and ISO 27001, while mentoring a team of engineers and shaping secure software practices across the organization.

Qualifications

• 5–10 years in security engineering with 2+ years in B2B tech or regulated industries.
• Hands-on coding and strong background in security engineering, app security, web security, SDLC, and DevSecOps.
• Experience owning SOC 2 Type II and/or ISO 27001 compliance.
• Leadership experience mentoring teams or leading security initiatives.

Responsibilities

• Build application security, IAM, and threat detection tools integrated into engineering workflows.
• Lead and mentor application security engineers; advance secure SDLC and vulnerability management.
• Partner with Engineering and Product to secure AI workflows, protect data, and manage agent identities.
• Own and expand the compliance roadmap, including SOC 2, SOC 1, and ISO 27001, with GTM and Legal teams.
• Develop detection and incident response capabilities, lead incident response, and drive improvements.
• Investigate and remediate security issues directly in the codebase.

Skills

Security engineering

Application security

DevSecOps

Threat modeling

Leadership

Mentoring

Coding

Job description

Wintermeyer Ventures is seeking a security leader to head security engineering and compliance for an AI-powered fintech platform serving lenders. You will work with Engineering, Product, GTM, and Legal to protect AI-driven workflows and scale security as the business grows.

You will own the security program from threat modeling and vulnerability management to SOC 2, SOC 1, and ISO 27001, while mentoring a team of engineers and shaping secure software practices across the organization.