Head of Security & Compliance
Casca · San Francisco
About this role
**Head of Security & Compliance** **About the Role** Casca is building AGI for banking, replacing legacy systems with AI-native technology. We're seeking a Head of Security & Compliance to lead our security strategy across tooling, team, compliance, and incident response. **Key Responsibilities** • Build security tooling & processes that integrate naturally into engineering workflows (appsec, IAM, threat detection) • Manage and mentor application security engineers; mature Secure SDLC, threat modeling, and vulnerability management • Secure agent execution surfaces; partner with Engineering and Product on AI-driven workflow security and data privacy • Drive customer trust through compliance initiatives (SOC 2, SOC 1, ISO 27001) and go-to-market support • Lead incident response and detection; build detection pipelines and drive systemic improvements **What We're Looking For** • 5+ years in progressive security roles; 2+ years at B2B tech, fintech, or regulated SaaS • Strong fundamentals: Secure SDLC, cloud security (AWS/GCP), web security, DevSecOps • Track record of practical, lightweight security policies and data governance • Proven SOC 2 Type II and/or ISO 27001 compliance ownership • Ability to review pen tests, debate architecture, and present to bank CISOs • Calm, methodical incident response leadership under pressure • Thrive in ambiguity; ruthlessly prioritize high-risk fixes • Fintech/banking experience preferred **Nice to Have** • Experience securing LLM usage and mitigating agentic system risks (prompt injection, data poisoning, unauthorized actions) **What You'll Get** • Impact & ownership shaping the future of banking through AI • Collaborative, innovative environment • Competitive compensation, benefits, and equity • Professional growth and mentorship • Fast-paced startup culture with high intensity during major launches
Listing freshness
CronJobs last confirmed this listing 2h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.