Head of Security & AI Governance

The role

This person will own security, compliance, IT, and AI governance programs. They will build systems, controls, and processes for SOC 2, HIPAA readiness, and AI governance frameworks.

What you will do

• SOC 2, HIPAA readiness, audit evidence, access reviews, and security controls
• Customer security diligence, questionnaires, trust materials, and vendor reviews
• Internal IT and security operations, full stack
• AI governance frameworks around data flows, model/vendor risk, prompt injection, jailbreaks, evals, logging, retention, and customer data boundaries
• Security policies, runbooks, training, incident response, and internal control documentation
• Access governance, admin policies, role-based access, and separation of duties
• External security and trust conversations with enterprise customers and prospects
• Selection and management of tools, MSPs, and vendors

Required qualifications

• 6+ years across security, compliance, IT operations, GRC, infrastructure security, or corporate systems
• Experience owning or materially operating a SOC 2 program
• Experience with MDM, endpoint security, device lifecycle, SaaS access governance, and internal IT operations
• Comfort working cross functionally between engineering, sales, and other functions
• Ability to speak credibly with enterprise customers about security, compliance, and trust
• Strong judgment, high attention to detail, and low tolerance for sloppy access or unclear ownership
• Curiosity and fluency around AI governance, LLM security, data boundaries, model/vendor risk, red teaming, and emerging enterprise trust expectations
• A builder mindset

Benefits

• Comprehensive healthcare
• Unlimited vacation
• Company-wide time off around July 4
• Company-wide time off around the end of the year

About the company

Flip provides Voice AI for eCommerce and healthcare brands. It is a small team of 50 with offices in NYC, LA, and the UK.