Security & AI Governance Lead

This is a fully remote position, open to applicants in United States.

📋 Description

• Report directly to the CTO and take charge of Tribe’s corporate security, compliance initiatives, AI governance, and security efforts directed towards clients.

• Lead enterprise security assessments, questionnaires, due diligence, and escalation processes.

• Manage Tribe’s SOC 2 program along with future certifications, Trust Center, evidence repository, and a reusable customer security package.

• Collaborate with GTM, Legal, and Delivery teams to oversee vendor risks, subprocessors, data retention policies, and customer security obligations.

• Take ownership of the security roadmap, risk register, policies, exceptions, metrics, and executive reporting.

• Establish and enhance controls across identity management, SSO and MFA, access lifecycle, MDM, EDR, encryption, DLP, patching, BYOD, vulnerability management, logging, and SIEM.

• Manage incident readiness and responses, including severity assessments, cross-functional collaboration, client communications, tabletop exercises, postmortems, and remedial actions.

• Define governance protocols for coding agents, AI assistants, model providers, and subprocessors, focusing on approved accounts, data flows, retention, telemetry, and human oversight.

• Collaborate with Forward Deployed Architects and infrastructure leads on architecture evaluations, threat modeling, secure SDLC, authentication, client segmentation, observability, and production readiness.

• Transform recurring customer requirements and delivery insights into reusable controls and patterns; assess what to develop, automate, outsource, or support with dedicated hires.

⛳️ Requirements

• A minimum of 8 years of experience in security.

• Experience in creating or significantly enhancing an enterprise security and GRC program that encompasses identity management, endpoints, data protection, monitoring, vendor risk, and incident response.

• Directly led complex security reviews, questionnaires, due diligence sessions, and escalations with large enterprise clients.

• Possess pragmatic technical expertise to analyze architecture, trace data flows, challenge implementations, and identify evidence that would validate a control.

• Have overseen a SOC 2 or ISO 27001 certification cycle from control design and scope through to audit and remediation.

• Experience in securing AI or ML systems, including model providers, agentic workflows, telemetry, evaluations, and addressing emerging AI-specific risks.

• Background in an AI-native services, consulting, or forward-deployed engineering environment.

🏝️ Benefits

• Offers Equity

• Impact: Contribute to the deployment of AI systems operating at scale within Fortune 500 companies.

• Growth: Remain engaged with state-of-the-art frameworks while honing field-tested instincts.

• Variety: Tackle challenges across diverse industries, including finance, healthcare, and defense.

• Culture: Join a team that values resilience, creativity, and achieving results over rigid processes.

• Trajectory: Develop both your technical expertise and consulting skills in one of the most challenging roles in AI delivery.