Casca

Head of Security & Compliance

San Francisco. Posted 4 months ago

The role

This person will build security tooling, processes, and architecture for AI-driven workflows. They will manage a team of application security engineers and own the compliance roadmap.

What you will do

  • Build security tooling and processes for engineers.
  • Create internal mechanisms for appsec, identity and access management, and threat detection.
  • Manage, mentor, and grow the team of application security engineers.
  • Mature Secure SDLC, threat modeling, and vulnerability management processes.
  • Partner with Engineering and Product to establish security architecture for AI-driven workflows.
  • Drive customer trust by partnering with go-to-market and legal teams.
  • Own and expand the compliance roadmap including SOC 2, SOC 1, and ISO 27001.
  • Lead incident response and detection.
  • Build the detection pipeline and act as primary commander.

Required qualifications

  • 5+ years in progressive security roles.
  • At least 2+ years at a B2B tech, fintech, or highly regulated SaaS company.
  • Strong fundamentals in secure SDLC, cloud security (AWS/GCP), Web security, and DevSecOps practices.
  • Ability to develop lightweight, durable security policies, access controls, and data governance frameworks.
  • Proven track record of owning SOC 2 Type II and/or ISO 27001 compliance.
  • Ability to review a penetration test, debate architecture with a lead engineer, and present to a bank's CISO.
  • Comfortable with incident response.
  • Experience leading incidents end to end and driving fixes.
  • Experience in fintech or banking.

Nice to have

  • Experience securing LLM usage for both coding and in product use cases
  • Mitigating risks specific to agentic systems (e.g., unauthorized actions taken by autonomous agents, prompt injection, and data poisoning)

Benefits

  • Impact & Ownership
  • Collaborative Environment
  • Competitive Compensation
  • Salary
  • Benefits
  • Potential equity
  • Professional Growth
  • Culture of Innovation

About the company

Casca is building AGI for banking. They are replacing legacy systems with AI-native technology that automates manual work.