Head of security & privacy engineering

About interface.ai

interface.ai is redefining how financial institutions serve their members through agentic AI and conversational AI — and we're doing it in production, at scale, with real outcomes. $30M in Series A funding. Cash-flow positive. A mission that matters: democratizing financial wellness for every American, not just the ones who can afford a private banker.

About the Role

As the Head of of Security & Privacy Engineering, you will report to the VP of Engineering and play a pivotal role in defining and executing interface.ai’s enterprise-wide security and privacy strategy. You will build and lead a program that ensures our AI products and cloud infrastructure are secure, compliant, and resilient, fostering customer trust and meeting regulatory requirements. This is a strategic and hands-on leadership role influencing technology, governance, and culture across the organization. You will lead the development of a secure, compliant, and resilient environment for our AI products and cloud infrastructure — ensuring customer trust and adherence to industry regulations. This is both a strategic and hands-on leadership role that will influence technology, governance, and culture across the organization.

You will be responsible for leading the company’s cybersecurity, privacy, and compliance programs; establishing strong internal controls; managing security risk; and driving security-by-design practices across all engineering and AI initiatives.

What you will do:

• As a Head of Security & Privacy Engineering you will be reporting to the VP of Engineering and will be responsible for:
• Own all aspects of Security (excluding physical security), Privacy, and Compliance across the company.
• Develop and enforce security and privacy policies, procedures, and standards, ensuring organization-wide compliance.
• Lead cybersecurity incident response and continuous risk assessment programs.
• Partner with the executive team to align security strategy with business goals and risk tolerance.
• Oversee compliance with GLBA, FFIEC, SOC 2, and other applicable frameworks.
• Champion privacy-by-design principles across product and AI initiatives.
• Lead security and privacy initiatives for AI-powered products, ensuring safe deployment of generative AI, LLM-driven systems, and AI workflows through secure architecture, risk mitigation, and responsible AI governance.
• Partner with Sales, Legal, Compliance, and Product teams to address security inquiries and due diligence requests.
• Deliver executive-level security and risk reports to leadership and the board.
• Collaborate with Engineering and Cloud Infrastructure teams to embed Dev SecOps and secure architecture practices.
• Build, mentor, and grow a high-performing team of security and privacy engineers.
• Foster a culture of proactive risk management, innovation, and continuous improvement.

Requirements

• 12+ years of cybersecurity leadership experience, ideally within financial services, banking, fintech, or regulated environments.
• AI & Generative AI Security Mindset: Experience securing AI-driven platforms, LLM workflows, or AI-powered products, including awareness of emerging AI risks such as prompt injection, data leakage, and model misuse.
• Cloud Security Expertise: Strong experience securing cloud-native infrastructure, particularly AWS, including identity management, network security, container security, and infrastructure protection.
• Security Architecture & DevSecOps: Ability to embed security-by-design practices across distributed systems, APIs, microservices, and CI/CD pipelines.
• Data Security & Privacy Engineering: Deep knowledge of data protection, encryption, identity and access management (IAM), and threat modeling, especially for sensitive financial data.
• Regulatory & Compliance Leadership: Strong understanding of GLBA, FFIEC, SOC 2, and enterprise security frameworks, with experience building compliant security programs.
• Executive Leadership & Communication: Proven ability to lead security programs, communicate risk to executive stakeholders, and build high-performing security and privacy engineering teams.
• Bachelor's degree in Information Security, Computer Science or related field.

Preferred:

• Master’s degree in Information Security, Computer Science, or related field.
• Experience in a startup or high-growth SaaS/AI company.
• Certifications such as CISSP, CISM, CCSP, or ISO 27001 Lead Implementer.

Why Join Us:

• Shape the security, privacy, and trust strategy for an industry-defining platform.
• Drive innovation in cloud, AI, and data privacy while ensuring compliance and trust at scale.
• Work in a high-impact, mission-driven environment where your leadership directly influences millions of banking customers.

Benefits

• 🩺 100% paid health, dental & vision care
• 💰 401(k) & financial wellness perks
• 🍜 Daily meals on us
• 🚇 Commuter benefit
• 💪 Monthly wellness stipend
• 🤖 Claude Enterprise + frontier AI tools for every employee — build with the best
• 🏙️ Brand-new 21st-floor SF office at 44 Montgomery — floor-to-ceiling views, worth showing up to
• 🌴 Discretionary PTO + paid parental leave
• 🧘 Mental health, wellness & family benefits
• 🚀 A mission-driven team shaping the future of banking

Why interface.ai

• Series A · $30M raised · Cash-flow positive — we're not burning cash hoping the product works. It works. Customers are live, revenue is real, and the mission is one you can explain to your family without a slide deck.
• You'll work directly with Bruce Kim (CTO / Co-Founder), who sets the technical bar and goes deep on the hardest problems, and Srinivas Njay (CEO), who is hands-on daily across product and engineering.
• Founding-team-tier equity, top-of-market base, comprehensive benefits, and a modern San Francisco office worth showing up to.
• The team is small enough that your judgment shapes everything, and the market is large enough that what you build will matter for a long time.

interface.ai is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.