← All roles

Head of Security & AI Enablement

Anrok· Security and IT
Apply on company site
Hybrid (San Francisco)$250k - $300kFull-timePosted 5mo ago

About the role

Experienced technology leader responsible for owning and evolving Anrok's Security, IT, and AI operating system at scale. Owns identity, corporate IT, compliance and information security, application security, and AI-automation capabilities. Reports to the COO and leads security, IT, and AI governance as the company grows.

Responsibilities

  • Partner with Engineering to establish best-in-class application security through threat modeling for critical systems, secure design reviews, vulnerability intake and prioritization, dependency and software supply chain risk, penetration testing, security testing in CI/CD, remediation SLAs and risk acceptance, product security incident response, customer facing security-assurance.
  • Own all compliance obligations end-to-end, including SOC 2 Type II, ISO 27001, and GDPR—serving as the DRI for audits, renewals, and cross-functional readiness. Develop and enforce security policies, access controls, and governance frameworks that grow with the business.
  • Own corporate IT infrastructure and operations—including endpoint management, SaaS stack administration, and IT support—managing and developing our IT team.
  • Establish strong AI governance to safely increase organizational velocity (model approval and vendor management, data classification and model-use restrictions, IAM, human approvals framework, prompt-injection and data-exfiltration protections, logging/monitoring of agent actions, AI incident response, cost/quality/business impact measurement).
  • Build infrastructure to support teams building AI-powered internal tools and infrastructure, deploying LLM-based automations, internal copilots, and agentic workflows at scale
  • Partner with Legal and Finance on data privacy obligations, vendor risk management, and third-party security assessments
  • Evaluate, procure, and manage the internal technology stack, ensuring appropriate tooling as we scale
  • Report on security and compliance posture to executive leadership as needed

Qualifications

  • 10+ years in IT, security, or related technical role, with 3+ years in a leadership position at a scaling tech company
  • Hands-on experience building or deploying AI/LLM-powered internal tools or automations
  • Strong application security fundamentals; ability to review AppSec findings and collaborate with engineers on remediations
  • Familiarity with GDPR and international data privacy obligations relevant to fintech handling customer financial data
  • Track record of building lightweight but durable compliance and governance programs (practical, not checkbox theater)
  • Proven ownership of SOC 2 Type II renewals end-to-end (DRI role)
  • Technically credible with strong business fluency (board presentations, vendor contracts, penetration test reviews)
  • Self-starter who thrives in ambiguity, builds scalable systems, knows when to automate vs. hire
  • Curious and motivated to learn new tools; experience with AI in work or personal projects

Skills

Required:Security governance and complianceApplication securityAI governance and AI/LLM security

Benefits

  • Equity upside of an early-stage startup with later-stage product-market fit
  • Daily lunch and snacks at office hubs
  • Medical, dental, and vision insurance 100% covered
  • One Medical membership and flexible sick benefits
  • Annual learning and development stipend (books, online courses, conferences)
  • Home internet reimbursement stipend
  • Wellness reimbursement program
  • Annual team off-sites and in-person opportunities at Anrok hubs
  • Home office setup stipend
Last updated Sep 2, 2026. Interested? Apply on the company site.

About Anrok

The global sales tax solution built for modern commerce | Anrok

Anrok automates sales tax compliance across your financial stack, so you can grow your business in any market.

sales taxVATcompliancemodern commerce

More open roles at Anrok