Note: The job is a remote job and is open to candidates in USA. Interface.ai is redefining how financial institutions serve their members through agentic AI and conversational AI. The Head of Security & Privacy Engineering will play a pivotal role in defining and executing the company's security and privacy strategy, ensuring compliance and customer trust across AI products and cloud infrastructure.
Responsibilities
- Own all aspects of Security (excluding physical security), Privacy, and Compliance across the company
- Develop and enforce security and privacy policies, procedures, and standards, ensuring organization-wide compliance
- Lead cybersecurity incident response and continuous risk assessment programs
- Partner with the executive team to align security strategy with business goals and risk tolerance
- Oversee compliance with GLBA, FFIEC, SOC 2, and other applicable frameworks
- Champion privacy-by-design principles across product and AI initiatives
- Lead security and privacy initiatives for AI-powered products, ensuring safe deployment of generative AI, LLM-driven systems, and AI workflows through secure architecture, risk mitigation, and responsible AI governance
- Partner with Sales, Legal, Compliance, and Product teams to address security inquiries and due diligence requests
- Deliver executive-level security and risk reports to leadership and the board
- Collaborate with Engineering and Cloud Infrastructure teams to embed Dev SecOps and secure architecture practices
- Build, mentor, and grow a high-performing team of security and privacy engineers
- Foster a culture of proactive risk management, innovation, and continuous improvement
Skills
- 12+ years of cybersecurity leadership experience, ideally within financial services, banking, fintech, or regulated environments
- AI & Generative AI Security Mindset: Experience securing AI-driven platforms, LLM workflows, or AI-powered products, including awareness of emerging AI risks such as prompt injection, data leakage, and model misuse
- Cloud Security Expertise: Strong experience securing cloud-native infrastructure, particularly AWS, including identity management, network security, container security, and infrastructure protection
- Security Architecture & DevSecOps: Ability to embed security-by-design practices across distributed systems, APIs, microservices, and CI/CD pipelines
- Data Security & Privacy Engineering: Deep knowledge of data protection, encryption, identity and access management (IAM), and threat modeling, especially for sensitive financial data
- Regulatory & Compliance Leadership: Strong understanding of GLBA, FFIEC, SOC 2, and enterprise security frameworks, with experience building compliant security programs
- Executive Leadership & Communication: Proven ability to lead security programs, communicate risk to executive stakeholders, and build high-performing security and privacy engineering teams
- Bachelor's degree in Information Security, Computer Science or related field
- Master's degree in Information Security, Computer Science, or related field
- Experience in a startup or high-growth SaaS/AI company
- Certifications such as CISSP, CISM, CCSP, or ISO 27001 Lead Implementer
Benefits
- 100% paid health, dental & vision care
- 401(k) & financial wellness perks
- Daily meals on us
- Commuter benefit
- Monthly wellness stipend
- Claude Enterprise + frontier AI tools for every employee — build with the best
- Brand-new 21st-floor SF office at 44 Montgomery — floor-to-ceiling views, worth showing up to
- Discretionary PTO + paid parental leave
- Mental health, wellness & family benefits
- Work in a high-impact, mission-driven environment where your leadership directly influences millions of banking customers
Company Overview
Company H1B Sponsorship