← All roles

Security & AI Governance Lead

Tribe AI· Product & Engineering
Apply on company site
Remote$260k - $300kFull-timePosted 1mo ago

About the role

Lead security, compliance, and AI governance for Tribe AI, owning corporate security, SOC 2 program, AI governance, and client-facing security work. Balance hands-on system building with policy and stakeholder engagement to ensure secure, trustworthy AI delivery for enterprise clients.

Responsibilities

  • Lead enterprise security reviews, questionnaires, diligence, and escalations—giving precise answers about current controls, planned improvements, and how identified gaps are being managed.
  • Own Tribe’s SOC 2 program and future certifications, along with the Trust Center, evidence library, and reusable customer security package.
  • Partner with GTM, Legal, and Delivery to remove legitimate security blockers while managing vendor risk, subprocessors, data retention, and sustainable customer commitments.
  • Own Tribe’s security roadmap, risk register, policies, exceptions, metrics, and executive reporting.
  • Establish and continuously improve controls across identity, SSO and MFA, access lifecycle, MDM, EDR, encryption, DLP, patching, BYOD, vulnerability management, logging, and SIEM.
  • Own incident readiness and response, including severity decisions, cross-functional coordination, client communication, tabletop exercises, postmortems, and durable remediation.
  • Define governance for coding agents, AI assistants, model providers, and subprocessors—including approved accounts, data flows, retention, telemetry, and human oversight.
  • Partner with Forward Deployed Architects and infrastructure leads on architecture reviews, threat modeling, secure SDLC, authentication, client segmentation, observability, and production readiness.
  • Turn recurring customer requirements and delivery lessons into reusable controls and patterns while determining what Tribe should build, automate, outsource, or support with dedicated hires.

Qualifications

  • 8+ years in security and have built or substantially improved an enterprise security and GRC program spanning identity, endpoints, data protection, monitoring, vendor risk, and incident response.
  • Personally led demanding security reviews, questionnaires, diligence sessions, and escalations with large enterprise customers.
  • Pragmatic technical depth: can interrogate an architecture, trace a data flow, challenge an implementation, and determine what evidence would prove a control.
  • Owned a SOC 2 or ISO 27001 cycle from control design and scope through audit and remediation.
  • Credible and precise under pressure, distinguishing facts from assumptions, current controls from roadmap items, and meaningful risk from security theater.
  • High agency and sound judgment, moving between strategy and execution while protecting the business without bottlenecking.

Skills

Required:Security governance and complianceSecurity reviews and diligenceIncident response and readiness
Last updated Aug 28, 2026. Interested? Apply on the company site.

About Tribe AI

The AI Delivery Layer for Enterprise

Tribe builds custom AI solutions that turn ambition into tangible business outcomes.

AI SolutionsEnterprise AI
Company profileWebsite

More open roles at Tribe AI