Director of Security
Prophecysimpledatalabs · San Francisco
About this role
**About Prophecy** Prophecy is the leader in AI-native data preparation and analysis—helping top enterprises turn data chaos into reliable insights. We introduce the AI-native data lifecycle (generate, refine, deploy), where AI agents and humans work together in visual and document interfaces to analyze, transform, and prepare data for trusted enterprise-scale outcomes. **About the Role** Prophecy supports some of the world’s largest organizations (including leading banks and telecoms) with sensitive, business-critical data. We’ve built a strong security foundation—ISO/IEC 27001:2022 certification and SOC 1 Type II and SOC 2 Type II reports—and we’re hiring our first dedicated security leader to take our program to the next level, especially as AI agents become central to how customers work with their data. You’ll own security end-to-end and lead a small team of security engineers and IT staff as a player-coach: setting strategy while doing hands-on work. You’ll be responsible for product and AI security, cloud and infrastructure security, compliance, and customer trust—plus the corporate security strategy that supports them. You’ll partner closely with engineering teams across the US and India and with go-to-market as we sell into security-conscious enterprises. This role reports directly to the CTO. --- **Responsibilities** **Security Strategy and Program** - Own Prophecy’s security strategy and roadmap across product, cloud infrastructure, and corporate environments. - Build and scale the security program: policies, controls, risk assessments, and clear decisions on what to mitigate vs. accept. **Product Security** - Partner with Engineering across the US and India to embed security into how we design, build, and ship AI agents and the data platform. - Own threat modeling for agentic systems (tool/permission scoping, prompt injection defenses, credential handling, customer data isolation, runtime monitoring). - Lead AI governance for the agent platform, aligned with the EU AI Act and NIST frameworks (including customer data flows through models and third-party LLM providers). - Lead application security practices: secure code review, vulnerability management, penetration testing, and secure-by-default engineering standards. - Secure integrations with Databricks, Snowflake, BigQuery, and other customer data platforms. **Internal AI Agent Security** - Set guardrails for internal agents: least-privilege access, short-lived credentials, and human approval for high-risk actions. - Review new internal agents and AI tools before they touch production or customer data; set policy for employee AI use; extend logging and incident response for agent activity. - Build security-team agents (e.g., questionnaire automation and alert triage). **Cloud and Infrastructure Security** - Own the security posture of AWS and Kubernetes environments (IAM, secrets management, logging, detection). - Build and run incident response—from detection and triage through post-incident review and remediation. **Compliance and Customer Trust** - Own and evolve compliance programs (ISO/IEC 27001:2022, SOC 1 Type II, SOC 2 Type II), maintaining continuous audit readiness and expanding coverage as the business grows. - Own data privacy compliance across regions (GDPR, CCPA, and India’s DPDP Act). - Lead security reviews, questionnaires, and trust documentation for enterprise and regulated-industry customers. - Join customer calls with CISOs and security teams to
Listing freshness
CronJobs last confirmed this listing 59m ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.