Security & Compliance Lead for AI SaaS Platform

Nozzles Inc.; San Francisco, Northern (CA, KY); Hybrid; USD 225,000 - 300,000; Full time

Job summary

HEN Technologies seeks a hands-on Security & Compliance Leader to own information security, product security, and regulatory compliance across devices, cloud, web, mobile, and AI. Lead SOC 2 audits, partner with Cloud/Data/Firmware teams, and serve as the executive security face to customers, investors, and the board.

You will drive security strategy, control implementations, and engineering collaboration while shaping governance for AI risk and enterprise security posture.

Qualifications

• 12+ years in information security; at least 4 years leading a security function.
• Personally led at least one company through SOC 2 (Type I and II) at a similar-stage company.
• Strong cloud security background, ideally GCP (AWS/Azure depth acceptable).
• Hands-on technical credibility: read Terraform modules, review IAM policies, TLS configurations.
• Engineering directors will respect you because you understand their work.
• Experience embedding security into modern engineering practices: GitHub workflows, CI/CD, IaC, secure SDLC.
• Demonstrated experience running vendor risk, incident response, and customer security questionnaires.
• Excellent written and verbal communication; able to write policies and brief leadership.

Responsibilities

• Define security and compliance roadmap aligned with company goals and regulatory requirements.
• Own end-to-end SOC 2 program including auditor relations and evidence collection.
• Mature GCP security posture with IAM, VPC design, KMS, Secrets management, and monitoring.
• Embed security into SDLC across cloud, web, mobile, firmware, and edge AI components.
• Lead device security in IoT/firmware with secure boot, OTA updates, and key management.
• Establish AI/ML governance for data, models, and third-party LLM usage.
• Own identity, access controls, MFA, and endpoint protection across the company.
• Manage vendor risk programs, DPAs, and SOC 2 collection for critical vendors.
• Lead IR, BCP/DR planning, tabletop exercises, and incident response.
• Support customer security questionnaires and enterprise sales in trust-building.

Skills

SOC 2

Cloud security

GCP

IAM

CI/CD

IaC

Threat modeling

Security governance

Policy tooling

Tools

Terraform

SAST

SCA

Secret scanning

Job description

HEN Technologies seeks a hands-on Security & Compliance Leader to own information security, product security, and regulatory compliance across devices, cloud, web, mobile, and AI. Lead SOC 2 audits, partner with Cloud/Data/Firmware teams, and serve as the executive security face to customers, investors, and the board.

You will drive security strategy, control implementations, and engineering collaboration while shaping governance for AI risk and enterprise security posture.