Head of Security & Compliance (AI for Banking)
ScrumAID
San Francisco, CA · Posted November 10, 2026
Just laid off? Start here: a plan for the first weeks
Want recruiters in Investment to be able to find you?
Roles at this level, like this one at ScrumAID, are often filled through recruiters.
More in California job market · Financial Services & Banking · Investment jobs
More roles at ScrumAID
- Applied AI Research Scientist, Continual Learning (Physical-World AI) · San Francisco, CA
- Deployment Strategist (Insurance AI Startup) · San Francisco, CA
- Forward Deployed Infrastructure Engineer (Document AI) · San Francisco, CA
- Principal Compliance Lead (Defense Manufacturing Roll-Up) · Los Angeles, CA
- Applied AI Engineer (AI Agent Evaluation Startup) · San Francisco, CA
- Post-Training Research Engineer (Applied AI Agents Startup) · San Jose, CA
Similar jobs
- Sr. Regulatory Affairs Manager · NeuroPace · Mountain View, CA
- Manager, Policy and Regulatory Affairs · Weave Grid · San Francisco, CA
- Director, Regulatory Affairs · Halozyme Therapeutics · San Diego, CA
- Senior Director, Regulatory Affairs CMC - Gene Therapy · INSMED · San Diego, CA
- Regulatory Reporting Program Manager, Stablecoin · Stripe · San Francisco, CA
- Vice President, Regulatory Affairs and Quality (GxP) · Pliant Therapeutics · CA
Where San Francisco, CA ranks
Where San Francisco, CA placed in our monthly rankings, month by month. Each month stays online at its own address.
November 2026
- #1Best cities for security jobs316 openings · of 20
- #1Best cities for technology jobs7,178 openings · of 100
- #1Best cities for financial services pay after cost of living$173k · of 33
- #1Best cities for entry-level jobs that want AI skills35% · of 100
- #1Best cities for entry-level jobs that want AI skills in the West Coast35% · of 54
- #1Cities with the most jobs that do not need a four-year degree in the West Coast902 jobs · of 47
How AI is used in this kind of work
AI use among managers, all other is little observed so far. Measured exposure for managers, all other: 7% (little observed).
Share of this job’s tasks that AI is already used for at work, from real usage. It is not a forecast of job loss, and a low number means no use seen yet. Source: Anthropic Economic Index.
About the job
A fast-growing startup modernizing core banking operations with AI-native software is looking for a hands-on security leader to own application security, compliance and incident response as the company scales.
What you’ll own
Design security tooling and processes for application security, identity and access, and threat detection that fit naturally into how engineers ship
Lead and grow a small team of application security engineers while maturing secure development, threat modeling and vulnerability management practices
Define the security architecture for AI-driven and agentic workflows, with a focus on data privacy and AI-specific risks
Own the compliance roadmap (SOC 2, SOC 1, ISO 27001) and support customer security reviews alongside sales and legal
Build the detection pipeline, run point on incidents and turn each one into lasting improvements
Profile
5 to 10 years in security engineering, including at least 2 years in B2B tech, ideally in a regulated space such as fintech
Hands-on coding ability: you dig into the codebase and fix security issues yourself
Strong grounding in application and product security, secure SDLC, web security and DevSecOps
A track record of owning SOC 2 Type II and/or ISO 27001 compliance
Bonus: a software engineering background before moving into security, or prior experience as a security lead or founding security engineer
On-site in San Francisco; relocation support is not offered. Visa transfers considered.