[Hiring] Security & AI Governance Lead @Tribe AI

Role Description

Enterprise AI runs on trust. Tribe’s teams work inside client environments, with client code, data, infrastructure, and systems. Before we can build, enterprise security teams need precise answers:

• What can our engineers access?
• Which tools process their data?
• What is logged or prevented?
• How are AI systems governed?
• Who is accountable when something goes wrong?

We have a strong foundation, including SOC 2 Type II, enterprise security assessments, a public Trust Center, and experience delivering in regulated environments. As the volume and sophistication of our work grows, we need a dedicated leader to make that posture systematic, measurable, and consistently defensible.

As Security and AI Governance Lead, you’ll report to the CTO and own Tribe’s corporate security, compliance program, AI governance, and client-facing security work. This is not a policy-only or back-office role. You’ll build controls, lead difficult customer reviews, handle incidents, interrogate architectures and data flows, and help our teams ship securely without smothering them in process.

When the facts are distributed across Engineering, IT, Legal, and Delivery, you own the answer. You’ll identify the right evidence owners, validate the underlying facts, resolve inconsistencies, and package the result into a clear, credible response. You’ll be highly hands-on today and build the systems, and specialist partnerships Tribe needs as we scale.

Qualifications

• 8+ years in security with experience in building or improving an enterprise security and GRC program.
• Experience leading demanding security reviews, questionnaires, diligence sessions, and escalations with large enterprise customers.
• Pragmatic technical depth to interrogate architecture, trace data flows, challenge implementations, and determine evidence for controls.
• Experience owning a SOC 2 or ISO 27001 cycle from control design and scope through audit and remediation.
• Ability to distinguish confirmed facts from assumptions and meaningful risk from security theater.
• High agency and sound judgment, moving comfortably between strategy and execution.

Requirements

• Lead enterprise security reviews, questionnaires, diligence, and escalations.
• Own Tribe’s SOC 2 program and future certifications.
• Partner with GTM, Legal, and Delivery to manage vendor risk and sustainable customer commitments.
• Own Tribe’s security roadmap, risk register, policies, exceptions, metrics, and executive reporting.
• Establish and improve controls across various security domains.
• Own incident readiness and response, including coordination and communication.
• Define governance for coding agents, AI assistants, model providers, and subprocessors.
• Partner with architects on architecture reviews and secure SDLC.
• Turn customer requirements into reusable controls and patterns.

Benefits

• Impact: Ship AI systems that run at scale in Fortune 500 enterprises.
• Growth: Stay hands-on with cutting-edge frameworks while developing instincts.
• Variety: Solve problems across industries, from finance to healthcare to defense.
• Culture: Work in a team that prizes resilience, creativity, and winning over process.
• Trajectory: Build both technical and consulting skills in a demanding role.