Head of Security & AI Enablement
Anrok· Security and IT
Hybrid (San Francisco)$250k - $300kFull-timePosted 5mo ago
About the role
Experienced technology leader responsible for owning and evolving Anrok's Security, IT, and AI operating system at scale. Owns identity, corporate IT, compliance and information security, application security, and AI-automation capabilities. Reports to the COO and leads security, IT, and AI governance as the company grows.
Responsibilities
- Partner with Engineering to establish best-in-class application security through threat modeling for critical systems, secure design reviews, vulnerability intake and prioritization, dependency and software supply chain risk, penetration testing, security testing in CI/CD, remediation SLAs and risk acceptance, product security incident response, customer facing security-assurance.
- Own all compliance obligations end-to-end, including SOC 2 Type II, ISO 27001, and GDPR—serving as the DRI for audits, renewals, and cross-functional readiness. Develop and enforce security policies, access controls, and governance frameworks that grow with the business.
- Own corporate IT infrastructure and operations—including endpoint management, SaaS stack administration, and IT support—managing and developing our IT team.
- Establish strong AI governance to safely increase organizational velocity (model approval and vendor management, data classification and model-use restrictions, IAM, human approvals framework, prompt-injection and data-exfiltration protections, logging/monitoring of agent actions, AI incident response, cost/quality/business impact measurement).
- Build infrastructure to support teams building AI-powered internal tools and infrastructure, deploying LLM-based automations, internal copilots, and agentic workflows at scale
- Partner with Legal and Finance on data privacy obligations, vendor risk management, and third-party security assessments
- Evaluate, procure, and manage the internal technology stack, ensuring appropriate tooling as we scale
- Report on security and compliance posture to executive leadership as needed
Qualifications
- 10+ years in IT, security, or related technical role, with 3+ years in a leadership position at a scaling tech company
- Hands-on experience building or deploying AI/LLM-powered internal tools or automations
- Strong application security fundamentals; ability to review AppSec findings and collaborate with engineers on remediations
- Familiarity with GDPR and international data privacy obligations relevant to fintech handling customer financial data
- Track record of building lightweight but durable compliance and governance programs (practical, not checkbox theater)
- Proven ownership of SOC 2 Type II renewals end-to-end (DRI role)
- Technically credible with strong business fluency (board presentations, vendor contracts, penetration test reviews)
- Self-starter who thrives in ambiguity, builds scalable systems, knows when to automate vs. hire
- Curious and motivated to learn new tools; experience with AI in work or personal projects
Skills
Required:Security governance and complianceApplication securityAI governance and AI/LLM security
Benefits
- Equity upside of an early-stage startup with later-stage product-market fit
- Daily lunch and snacks at office hubs
- Medical, dental, and vision insurance 100% covered
- One Medical membership and flexible sick benefits
- Annual learning and development stipend (books, online courses, conferences)
- Home internet reimbursement stipend
- Wellness reimbursement program
- Annual team off-sites and in-person opportunities at Anrok hubs
- Home office setup stipend
Last updated Sep 2, 2026. Interested? Apply on the company site.
About Anrok
The global sales tax solution built for modern commerce | Anrok
Anrok automates sales tax compliance across your financial stack, so you can grow your business in any market.
sales taxVATcompliancemodern commerce
More open roles at Anrok
- Enterprise Account Manager1w agoSan Francisco, Salt Lake City +1 more · Activation
- Product Manager, File and Remit2w agoRemote · Engineering, Product, and Design
- Investor Partner Development Manager (PE/VC)3w agoHybrid (San Francisco), Hybrid (New York City) · Partnerships
- Mid-Market Account Executive4w agoHybrid (San Francisco), Hybrid (New York City) · Sales
- Paid Marketing Manager1mo agoHybrid (San Francisco), Hybrid (Salt Lake City) +1 more · Marketing