Security & Trust Lead

Alex; San Francisco (CA); On-site; USD 180,000 - 240,000; Full time

Benefits offered by this job

Healthcare

Vision/dental

401(k)

Unlimited PTO

SF office

Company lunches

Team events

Job summary

Alex is seeking a Security & Trust Lead to own information security, compliance, and AI governance. You will report to the CTO and partner with Engineering, Sales, and Operations to build enterprise-grade security programs.

You will own infosec questionnaires, audits, and regulatory mappings, drive SOC 2 readiness, and shape a proactive risk posture for AI-enabled hiring at scale in a fast-growing company.

Qualifications

• Security and risk management experience in enterprise software.
• Ability to present to CISO level and customers.
• Strong organizational and analytical skills.
• Interest in AI risk and governance.

Responsibilities

• Own infosec questionnaires, SIGs, CAIQs, vendor risk assessments, DPAs, and security addenda.
• Automate the process and build evidence repository and tooling.
• Develop AI risk and regulation viewpoint on EU AI Act, NYC LL144, GDPR, and emerging global rules.
• Lead security and AI governance calls with enterprise prospects and customers.
• Run compliance and audit: SOC 2 and roadmap for ISO certifications.
• Collaborate with Engineering to ensure controls back up what we tell customers.
• Shift left with Product and Engineering for security questions at design time.

Skills

Security leadership

AI governance

InfoSec program management

Regulatory compliance

Vendor risk management

Security audits

Tools

SOC 2

ISO 27001

CAIQs

DPAs

Job description

About Alex

About AlexAlex is the AI recruiter for hiring great people.Alex interviews, screens, and schedules every candidate – over voice, video, and text – so talent teams hire more great people, faster, without adding TA headcount. The recruiter stays in control: every shortlist is approved by a human, and every relationship and offer is owned by the customer's team.We're past 1M+ interviews, integrate with 33+ ATS platforms, and 96% of candidates prefer interviewing with Alex. We're revenue-generating, well-funded, backed by premier investors, and are focused on enterprise customers: selling to VPs of Talent Acquisition, CHROs, and CFOs at large employers who are rethinking how hiring gets done at scale.

What we're looking for

We're hiring our first dedicated Security & Trust Lead to own information security, compliance, and AI governance at Alex.AI in hiring is one of the most scrutinized categories in enterprise software right now. That means two things: we need a security and compliance program that genuinely holds up, and we need someone who can stand in front of an enterprise CISO and make them confident in it. You'll own both — the controls, audits, and processes behind the scenes, and the customer conversations where a security team decides whether they trust us.You do not need to be a compliance expert today, but you need to be motivated to own this space. You need to be smart, technical, extremely organized, and genuinely interested in AI risk and security. We'll expect and support you to get deep fast.You'll report to our CTO and work closely with Engineering, Sales, and Operations.

Your day to day will include

• Own the customer security review, end to end: Be the single owner of infosec questionnaires, SIGs, CAIQs, vendor risk assessments, DPAs, and security addenda. Turn them around fast, accurately, and without pulling engineers off roadmap. Where deals stall on security, you unstick them.
• Automate the process, don't just staff it: Build the answer library, evidence repository, and tooling — including AI tooling — that takes questionnaire turnaround from weeks to days. The measure of success is that volume goes up while manual effort goes down.
• Become our expert on AI risk and regulation: Own our point of view on the EU AI Act, NYC LL144, GDPR, state AI and biometric laws, bias auditing, and emerging global rules on automated employment decision tools. Track what's changing, translate it into what we actually do, and keep Sales, Product, and leadership ahead of it.
• Represent Alex externally: Lead security, information security, and AI governance calls with enterprise prospects and customers. Build the trust center, security whitepapers, and AI governance documentation that secures Alex as enterprise-grade, leading expert in this space.
• Run compliance and audit: Own SOC 2 and drive the roadmap for what comes next (ISO 27001, ISO 42001, regional requirements). Manage auditors, penetration tests, and compliance platform tooling. Keep certifications current without fire drills.
• Make the controls real: Partner with Engineering to ensure our systems, processes, and technical controls genuinely back up what we tell customers — access management, vendor and subprocessor review, vulnerability triage and remediation, incident response, cloud and CI/CD security posture. Build the risk register and run the program against it.
• Shift left with Product and Engineering: Get involved early on new features and model changes so security, privacy, and AI-governance questions are answered at design time rather than discovered in a customer review.

This role is based in office in San Francisco and reports to our CTO.

Why join

You own the function: First security and trust hire. You define the program, the posture, and the story — not inherit someone else's.

The most interesting regulatory frontier in software: AI in hiring is where AI regulation is landing first and hardest. You'll be building a playbook that doesn't exist yet.

Direct line to revenue: Security review is a live bottleneck in our enterprise GTM motion. Fixing it is visible, measurable, and immediately valuable.

Room to grow into it: We're hiring for trajectory, not credentials. If you're technical, organized, and hungry to go deep on AI risk, this role will take you further than a information security specialist seat at a larger company.

Exposure: Work directly with our CTO, CEO, Sales leadership, and enterprise customers' security teams.

Impact: Help a product that changes how people get hired and gives every candidate a real interview instead of a resume screen, responsibly.

Upside: Competitive compensation, including equity.

Benefits

• Healthcare, vision and dental insurance, 401(k), unlimited PTO, beautiful office in SF, company-paid lunches, and great company events.

What am I waiting for?