Asks for

The ad says“AI & Generative AI Security Mindset: Experience securing AI-driven platforms, LLM workflows, or AI-powered products, including awareness of emerging AI risks such as prompt injection, data leakage, and model misuse”
The ad says“Security Architecture & DevSecOps: Ability to embed security-by-design practices across distributed systems, APIs, microservices, and CI/CD pipelines”
The ad says“Cloud Security Expertise: Strong experience securing cloud-native infrastructure, particularly AWS, including identity management, network security, container security, and infrastructure protection”
The ad says“Security Architecture & DevSecOps: Ability to embed security-by-design practices across distributed systems, APIs, microservices, and CI/CD pipelines”
The ad says“Cloud Security Expertise: Strong experience securing cloud-native infrastructure, particularly AWS, including identity management, network security, container security, and infrastructure protection”
The ad says“12+ years of cybersecurity leadership experience, ideally within financial services, banking, fintech, or regulated environments.”
The ad says“Data Security & Privacy Engineering: Deep knowledge of data protection, encryption, identity and access management (IAM), and threat modeling, especially for sensitive financial data”
The ad says“Security Architecture & DevSecOps: Ability to embed security-by-design practices across distributed systems, APIs, microservices, and CI/CD pipelines”
The ad says“Data Security & Privacy Engineering: Deep knowledge of data protection, encryption, identity and access management (IAM), and threat modeling, especially for sensitive financial data”
The ad says“Regulatory & Compliance Leadership: Strong understanding of GLBA, FFIEC, SOC 2, and enterprise security frameworks, with experience building compliant security programs”
The ad says“Regulatory & Compliance Leadership: Strong understanding of GLBA, FFIEC, SOC 2, and enterprise security frameworks, with experience building compliant security programs”
The ad says“Data Security & Privacy Engineering: Deep knowledge of data protection, encryption, identity and access management (IAM), and threat modeling, especially for sensitive financial data”
The ad says“Cloud Security Expertise: Strong experience securing cloud-native infrastructure, particularly AWS, including identity management, network security, container security, and infrastructure protection”
The ad says“Cloud Security Expertise: Strong experience securing cloud-native infrastructure, particularly AWS, including identity management, network security, container security, and infrastructure protection”
The ad says“Security Architecture & DevSecOps: Ability to embed security-by-design practices across distributed systems, APIs, microservices, and CI/CD pipelines”
The ad says“Cloud Security Expertise: Strong experience securing cloud-native infrastructure, particularly AWS, including identity management, network security, container security, and infrastructure protection”
The ad says“Security Architecture & DevSecOps: Ability to embed security-by-design practices across distributed systems, APIs, microservices, and CI/CD pipelines”
The ad says“Regulatory & Compliance Leadership: Strong understanding of GLBA, FFIEC, SOC 2, and enterprise security frameworks, with experience building compliant security programs”
The ad says“Data Security & Privacy Engineering: Deep knowledge of data protection, encryption, identity and access management (IAM), and threat modeling, especially for sensitive financial data”

About Interface.ai

interface.ai is redefining how financial institutions serve their members through agentic AI and conversational AI — and we're doing it in production, at scale, with real outcomes. $30M in Series A funding. Cash-flow positive. A mission that matters: democratizing financial wellness for every American, not just the ones who can afford a private banker.

About the Role

As the Head of of Security & Privacy Engineering, you will report to the VP of Engineering and play a pivotal role in defining and executing interface.ai’s enterprise-wide security and privacy strategy.You will build and lead a program that ensures our AI products and cloud infrastructure are secure, compliant, and resilient, fostering customer trust and meeting regulatory requirements. This is a strategic and hands-on leadership role influencing technology, governance, and culture across the organization. You will lead the development of a secure, compliant, and resilient environment for our AI products and cloud infrastructure — ensuring customer trust and adherence to industry regulations. This is both a strategic and hands-on leadership role that will influence technology, governance, and culture across the organization.

You will be responsible for leading the company’s cybersecurity, privacy, and compliance programs; establishing strong internal controls; managing security risk; and driving security-by-design practices across all engineering and AI initiatives.

What you will do:

As a Head of Security & Privacy Engineering you will be reporting to the VP of Engineering and will be responsible for:

Own all aspects of Security (excluding physical security), Privacy, and Compliance across the company.
Develop and enforce security and privacy policies, procedures, and standards, ensuring organization-wide compliance.
Lead cybersecurity incident response and continuous risk assessment programs.
Partner with the executive team to align security strategy with business goals and risk tolerance.
Oversee compliance with GLBA, FFIEC, SOC 2, and other applicable frameworks.
Champion privacy-by-design principles across product and AI initiatives.
Lead security and privacy initiatives for AI-powered products, ensuring safe deployment of generative AI, LLM-driven systems, and AI workflows through secure architecture, risk mitigation, and responsible AI governance.
Partner with Sales, Legal, Compliance, and Product teams to address security inquiries and due diligence requests.
Deliver executive-level security and risk reports to leadership and the board.
Collaborate with Engineering and Cloud Infrastructure teams to embed Dev SecOps and secure architecture practices.
Build, mentor, and grow a high-performing team of security and privacy engineers.
Foster a culture of proactive risk management, innovation, and continuous improvement.

Requirements

12+ years of cybersecurity leadership experience, ideally within financial services, banking, fintech, or regulated environments.
AI & Generative AI Security Mindset: Experience securing AI-driven platforms, LLM workflows, or AI-powered products, including awareness of emerging AI risks such as prompt injection, data leakage, and model misuse
Cloud Security Expertise: Strong experience securing cloud-native infrastructure, particularly AWS, including identity management, network security, container security, and infrastructure protection
Security Architecture & DevSecOps: Ability to embed security-by-design practices across distributed systems, APIs, microservices, and CI/CD pipelines
Data Security & Privacy Engineering: Deep knowledge of data protection, encryption, identity and access management (IAM), and threat modeling, especially for sensitive financial data
Regulatory & Compliance Leadership: Strong understanding of GLBA, FFIEC, SOC 2, and enterprise security frameworks, with experience building compliant security programs
Executive Leadership & Communication: Proven ability to lead security programs, communicate risk to executive stakeholders, and build high-performing security and privacy engineering teams
Bachelor's degree in Information Security, Computer Science or related field.

Preferred:

Master’s degree in Information Security, Computer Science, or related field.
Experience in a startup or high-growth SaaS/AI company.
Certifications such as CISSP, CISM, CCSP, or ISO 27001 Lead Implementer.

Why Join Us:

Shape the security, privacy, and trust strategy for an industry-defining platform.
Drive innovation in cloud, AI, and data privacy while ensuring compliance and trust at scale.
Work in a high-impact, mission-driven environment where your leadership directly influences millions of banking customers.

Benefits

🩺 100% paid health, dental & vision care

💰 401(k) & financial wellness perks

🍜 Daily meals on us

🚇 Commuter benefit

💪 Monthly wellness stipend

🤖 Claude Enterprise + frontier AI tools for every employee — build with the best

🏙️ Brand-new 21st-floor SF office at 44 Montgomery — floor-to-ceiling views, worth showing up to

🌴 Discretionary PTO + paid parental leave

🧘 Mental health, wellness & family benefits

🚀 A mission-driven team shaping the future of banking

Why interface.ai

Series A · $30M raised · Cash-flow positive — we're not burning cash hoping the product works. It works. Customers are live, revenue is real, and the mission is one you can explain to your family without a slide deck.

You'll work directly with Bruce Kim (CTO / Co-Founder), who sets the technical bar and goes deep on the hardest problems, and Srinivas Njay (CEO), who is hands-on daily across product and engineering. Founding-team-tier equity, top-of-market base, comprehensive benefits, and a modern San Francisco office worth showing up to. The team is small enough that your judgment shapes everything, and the market is large enough that what you build will matter for a long time.

interface.ai is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.

Asks for

Values