Head of Security – Business AI Applications

Anrok

Head of Security & Business AI Applications at Anrok, leading security programs and IT infrastructure in a fast-growing startup. Responsible for corporate IT, compliance, and AI-powered tools.

Posted 5/13/2026full-timeSan Francisco • California • 🇺🇸 United StatesLeadWebsite

About the role

Key responsibilities & impact

Build the infrastructure to support teams building AI-powered internal tools and infrastructure, deploying LLM-based automations, internal copilots, and agentic workflows to improve how Anrok operates at scale
Lead Anrok’s application security program, partnering with engineering to identify risks, drive secure development practices, and protect sensitive customer financial data
Own corporate IT infrastructure and operations—including endpoint management, SaaS stack administration, and IT support—managing and developing our IT team member
Own all compliance obligations end-to-end, including SOC 2 Type II, ISO 27001, and GDPR—serving as the DRI for audits, renewals, and cross-functional readiness
Develop and enforce security policies, access controls, and governance frameworks that grow with the business
Partner with Legal and Finance on data privacy obligations, vendor risk management, and third-party security assessments
Evaluate, procure, and manage the internal technology stack, ensuring we’re using the right tools as we scale
Report on security and compliance posture to executive leadership as needed

Requirements

What you’ll need

10+ years in IT, security, or a related technical role, with 3+ years in a leadership position at a scaling tech company
Hands-on experience building or deploying AI/LLM-powered internal tools or automations—you default to AI-first solutions for operational problems
Strong application security fundamentals—you can review AppSec findings, work with engineers on remediations, and evaluate risk without needing to write the code yourself
Genuine familiarity with GDPR and international data privacy obligations, relevant to a fintech handling customer financial data across jurisdictions
Track record of building lightweight but durable compliance and governance programs—practical, not checkbox theater
Proven ownership of SOC 2 Type II renewals end-to-end—you’ve been the DRI, not just a contributor
Technically credible with strong business fluency: you can present to a board, negotiate a vendor contract, and review a penetration test in the same week
Self-starter who thrives in ambiguity, builds scalable systems, and knows when to automate vs. hire

Benefits

Comp & perks

The equity upside of an early-stage startup with the product-market fit of a later-stage company.
Daily lunch and snacks for those working out of our office hubs.
Medical, dental, and vision insurance covered 100%.
One Medical membership covered, flexible sick benefits, and more.
Annual learning and development stipend for books, online courses, and conferences, as well as a curious team to share your learnings with.
Home internet reimbursement stipend.
Wellness reimbursement program.
Annual team off-sites and in-person opportunities around our growing Anrok hubs.
Home office setup stipend to ensure you have the equipment you need to thrive at work.

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

AI-powered toolsLLM-based automationsapplication securityendpoint managementSaaS administrationsecurity policiesaccess controlsgovernance frameworkscompliance programsvendor risk management

Soft Skills

leadershipcommunicationnegotiationself-starterproblem-solvingadaptabilitycollaborationstrategic thinkingpresentation skillsrisk evaluation

Certifications

SOC 2 Type IIISO 27001