Security & AI Governance Lead

Tribe AI

3d • $260,000 - $300,000 • Hybrid

About The Position

Tribe AI is an AI-native services company that helps enterprises build and deploy AI products. This role is crucial for ensuring enterprise AI runs on trust. The Security and AI Governance Lead will report to the CTO and be responsible for Tribe’s corporate security, compliance program, AI governance, and client-facing security work. This is a hands-on role that involves building controls, leading customer reviews, handling incidents, and ensuring secure delivery without excessive process. The lead will be responsible for gathering and validating information from various departments to provide clear and credible responses to security inquiries. The role requires building systems and establishing partnerships to support Tribe's growth.

Requirements

• 8+ years in security.
• Experience building or substantially improving an enterprise security and GRC program spanning identity, endpoints, data protection, monitoring, vendor risk, and incident response.
• Experience leading demanding security reviews, questionnaires, diligence sessions, and escalations with large enterprise customers.
• Pragmatic technical depth: ability to interrogate an architecture, trace a data flow, challenge an implementation, and determine evidence for controls.
• Experience owning a SOC 2 or ISO 27001 cycle from control design and scope through audit and remediation.
• Credibility and precision under pressure, distinguishing facts from assumptions, current controls from roadmaps, and meaningful risk from security theater.
• High agency and sound judgment, comfortable moving between strategy and execution.
• Ability to protect the business without becoming a bottleneck.

Nice To Haves

• Experience securing AI or ML systems, including model providers, agentic workflows, telemetry, evaluations, and emerging AI-specific risks.
• Experience in an AI-native services, consulting, or forward-deployed engineering environment.

Responsibilities

• Lead enterprise security reviews, questionnaires, diligence, and escalations, providing precise answers about current controls, planned improvements, and gap management.
• Own Tribe’s SOC 2 program and future certifications, including the Trust Center, evidence library, and reusable customer security package.
• Partner with GTM, Legal, and Delivery to address security blockers, manage vendor risk, subprocessors, data retention, and customer commitments.
• Own Tribe’s security roadmap, risk register, policies, exceptions, metrics, and executive reporting.
• Establish and improve controls for identity, SSO and MFA, access lifecycle, MDM, EDR, encryption, DLP, patching, BYOD, vulnerability management, logging, and SIEM.
• Own incident readiness and response, including severity decisions, cross-functional coordination, client communication, tabletop exercises, postmortems, and remediation.
• Define governance for coding agents, AI assistants, model providers, and subprocessors, covering approved accounts, data flows, retention, telemetry, and human oversight.
• Partner with Forward Deployed Architects and infrastructure leads on architecture reviews, threat modeling, secure SDLC, authentication, client segmentation, observability, and production readiness.
• Translate recurring customer requirements and delivery lessons into reusable controls and patterns, determining build, automate, outsource, or hire strategies.

Benefits

• Impact: Ship AI systems that run at scale in Fortune 500 enterprises.
• Growth: Stay hands-on with cutting-edge frameworks and develop field-tested instincts.
• Variety: Solve problems across industries like finance, healthcare, and defense.
• Culture: Work in a team that prizes resilience, creativity, and winning over process.
• Trajectory: Build both technical and consulting skills in a demanding role in AI delivery.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed