Security Risk & Compliance, Agent Security

Highlights

• Author security policies for how AI agents are built, deployed, and operated.
• Define review criteria for agents interacting with sensitive or regulated data.
• Map agent security controls to ISO 27001, ISO 42001, and EU AI Act.

What they offer

• optional equity donation matching
• generous vacation and parental leave
• flexible working hours

Ideal candidate

Experienced GRC leader energized by ambiguous, high-velocity environments who reasons from threat models to pragmatic controls and influences engineers through clear writing and education.

Requirements

• 8+ years in security governance, risk, and compliance including ownership of security policies and control standards at a technology company
• Experience compartmentalizing sensitive data, PII, or IP and understanding identity and access protection boundaries
• Ability to design least-privilege access and accountability controls for non-human identities acting on a person's behalf
• Ability to reason from threat model to control and explain tradeoffs to engineers and auditors
• Experience defining risk-based review or approval criteria within engineering workflows under high change velocity
• Clear, precise writing for technical and non-technical audiences
• Thrives in ambiguous environments, proposing standards without settled industry playbook
• Energized by being security and risk authority educating and influencing outcomes