Security Risk & Compliance, Agent Security

📋 Description

• Serve as the security policy partner for AI agent governance, authoring the policies and standards
• Define review and approval criteria when an agent may interact with sensitive or regulated data
• Serve as the GRC reviewer within existing engineering approval workflows
• Define data governance requirements for agents, including least-privilege access, access reviews
• Monitor agent behavior over time and adapt governance requirements in partnership with
• Map agent security and data controls to AI governance frameworks (e.g., ISO 27001, ISO 42001, EU AI

🎯 Requirements

• Have 8+ years in security governance, risk, and compliance, including ownership of security
• Have owned or meaningfully supported efforts to compartmentalize sensitive data, PII, or
• Think about non-human identities as a distinct risk and control category, and can design
• Can reason from a threat model to a control and explain the tradeoff to both an engineer and an
• Have defined risk-based review or approval criteria within engineering workflows and kept them
• Deliver clear, precise written work for both technical and non-technical audiences

🎁 Benefits

• Competitive compensation and benefits
• Optional equity donation matching
• Generous vacation and parental leave
• Flexible working hours
• Lovely office space in which to collaborate with colleagues