Head of Security & AI Governance

Flip•Los Angeles, CA

2d•Onsite

About The Position

At Flip, security and compliance are not checkboxes. They were baked into the company early and helped us earn the trust of some of the largest enterprises in the world. As customers increasingly trust AI to represent their brand, make decisions, and interact directly with their customers, the security and trust model has to evolve. We are looking for a hands-on leader to own Flip’s security, compliance, IT, and AI governance program as we scale. This is not a role for someone who only wants to answer questionnaires, manage an audit calendar, or operate at 30,000 feet. We need someone who can keep their head up and help define where AI governance is going, while also rolling up their sleeves and building the systems, controls, and processes we need today. The right person can move fluidly between customer security calls, SOC 2 controls, Okta and access governance, internal IT operations, AI risk, vendor diligence, and emerging questions around LLM security, prompt injection, red teaming, data boundaries, logging, retention, and model risk. We are not looking for someone who simply responds to security questionnaires. We are looking for someone who can look at a questionnaire and say, “They are asking the wrong questions,” then help define the right ones.

Requirements

6+ years across security, compliance, IT operations, GRC, infrastructure security, or corporate systems
Experience owning or materially operating a SOC 2 program
Experience with MDM, endpoint security, device lifecycle, SaaS access governance, and internal IT operations
Comfort working cross functionally between engineering, sales, and other functions
Ability to speak credibly with enterprise customers about security, compliance, and trust
Strong judgment, high attention to detail, and low tolerance for sloppy access or unclear ownership
Curiosity and fluency around AI governance, LLM security, data boundaries, model/vendor risk, red teaming, and emerging enterprise trust expectations
A builder mindset: ability to design policy, implement workflow, chase evidence, clean up processes, and improve them over time

Responsibilities

Own SOC 2, HIPAA readiness, audit evidence, access reviews, and security controls
Manage customer security diligence, questionnaires, trust materials, and vendor reviews
Oversee internal IT and security operations, full stack
Develop AI governance frameworks around data flows, model/vendor risk, prompt injection, jailbreaks, evals, logging, retention, and customer data boundaries
Create and maintain security policies, runbooks, training, incident response, and internal control documentation
Implement access governance, admin policies, role-based access, and separation of duties across IT, Engineering, DevOps, and business systems
Lead external security and trust conversations with enterprise customers and prospects
Select and manage tools, MSPs, and vendors that help Flip scale securely