Security & Trust Lead

Alex AI•San Francisco, CA

11d•$150,000 - $180,000•Onsite

About The Position

Alex is seeking its first dedicated Security & Trust Lead to oversee information security, compliance, and AI governance. This role is crucial given the scrutiny of AI in hiring. The lead will be responsible for establishing a robust security and compliance program and communicating its strength to enterprise customers. The position requires a smart, technical, highly organized individual with a strong interest in AI risk and security, who is motivated to become an expert in this domain. The role reports to the CTO and collaborates with Engineering, Sales, and Operations.

Requirements

Technical aptitude
Extreme organization
Genuine interest in AI risk and security
Motivation to own the security and compliance space
Ability to get deep into technical and regulatory details quickly

Nice To Haves

Compliance expertise (though not required initially)
Experience with AI risk and regulation
Experience with SOC 2, ISO 27001, ISO 42001
Experience with security questionnaires and vendor risk assessments

Responsibilities

Own the customer security review process from end to end, including questionnaires, SIGs, CAIQs, vendor risk assessments, DPAs, and security addenda.
Automate security review processes by building an answer library, evidence repository, and tooling, including AI tools, to reduce turnaround time.
Become the company's expert on AI risk and regulation, including the EU AI Act, NYC LL144, GDPR, state AI and biometric laws, bias auditing, and emerging global rules.
Represent Alex externally in calls with enterprise prospects and customers regarding security, information security, and AI governance.
Lead compliance and audit efforts, including SOC 2, and drive the roadmap for future certifications like ISO 27001 and ISO 42001.
Partner with Engineering to ensure technical controls, processes, and systems align with customer commitments, including access management, vendor review, vulnerability management, incident response, and cloud security.
Collaborate with Product and Engineering to integrate security, privacy, and AI governance considerations early in the development lifecycle ('shift left').