GRC CareersAGJ, the AI governance job boardPost a Job

Jobs › Head of Security & AI Governance

Head of Security & AI Governance

Flip

Job at a glance

Category
GRC
Work arrangement
On-site
Location
Los Angeles
Posted
Aug 20, 2026
Apply for this jobApplications go directly to Flip
Applying today? Most GRC roles fill fast. Get the next ones the day they post, in Los Angeles.

Free. One click to unsubscribe. We never share your address.

ShareEmailLinkedInXFacebookPrint / Save PDFCopy link

Flip is hiring a Head of Security & AI Governance in Los Angeles. This is a GRC job in the governance, risk, and compliance field. Review the full details below and apply directly with Flip.

p span style= font-family: helvetica, arial, sans-serif; font-size: 12pt; strong TITLE: /strong Head of Security amp; AI Governance /span /p p span style= font-family: helvetica, arial, sans-serif; font-size: 12pt; strong REPORTING TO: /strong CTO /span /p p span style= font-family: helvetica, arial, sans-serif; font-size: 12pt; strong LOCATION: /strong Marina del Rey, CA (Onsite Monday - Friday) /span /p p span style= font-family: helvetica, arial, sans-serif; font-size: 12pt; strong Who The Flip Is Flip? /strong /span /p p span style= font-family: helvetica, arial, sans-serif; font-size: 12pt; Ever call your favorite eCommerce brand or healthcare provider, and have a crazy good Voice AI answer? That’s Flip. Hundreds of brands from Under Armour and Tory Burch in retail to Experity and Fast Pace Health in healthcare trust Flip to have millions of phone calls with their customers every month. /span /p p span style= font-family: helvetica, arial, sans-serif; font-size: 12pt; We’ve built our company on the idea that the best way to grow is to have a reference list as long as our customer list, and a constant belief that the team is the best thing we’ve built. Both are true today and increasingly so every day. /span /p p span style= font-family: helvetica, arial, sans-serif; font-size: 12pt; Many on our team would tell you this is their favorite place they’ve ever worked, and the hardest they’ve ever worked. It’s ideal for people who want to go all-in, do the work, ride the roller coaster, and have a great Flippin time doing it. We’re a small and mighty team of 50 today with offices in NYC, LA, and the UK. /span /p h2 span style= font-family: helvetica, arial, sans-serif; font-size: 12pt; strong The Role /strong /span /h2 p span style= font-family: helvetica, arial, sans-serif; font-size: 12pt; At Flip, security and compliance are not checkboxes. /span /p p span style= font-family: helvetica, arial, sans-serif; font-size: 12pt; They were baked into the company early and helped us earn the trust of some of the largest enterprises in the world. As customers increasingly trust AI to represent their brand, make decisions, and interact directly with their customers, the security and trust model has to evolve. /span /p p span style= font-family: helvetica, arial, sans-serif; font-size: 12pt; We are looking for a hands-on leader to own Flip’s security, compliance, IT, and AI governance program as we scale. /span /p p span style= font-family: helvetica, arial, sans-serif; font-size: 12pt; This is not a role for someone who only wants to answer questionnaires, manage an audit calendar, or operate at 30,000 feet. We need someone who can keep their head up and help define where AI governance is going, while also rolling up their sleeves and building the systems, controls, and processes we need today. /span /p p span style= font-family: helvetica, arial, sans-serif; font-size: 12pt; The right person can move fluidly between customer security calls, SOC 2 controls, Okta and access governance, internal IT operations, AI risk, vendor diligence, and emerging questions around LLM security, prompt injection, red teaming, data boundaries, logging, retention, and model risk. /span /p p span style= font-family: helvetica, arial, sans-serif; font-size: 12pt; We are not looking for someone who simply responds to security questionnaires. We are looking for someone who can look at a questionnaire and say, “They are asking the wrong questions,” then help define the right ones. /span /p h2 span style= font-family: helvetica, arial, sans-serif; font-size: 12pt; strong What You’ll Own /strong /span /h2 ul li style= font-family: helvetica, arial, sans-serif; font-size: 12pt; span style= font-family: helvetica, arial, sans-serif; font-size: 12pt; SOC 2, HIPAA readiness, audit evidence, access reviews, and security controls /span /li li style= font-family: helvetica, arial, sans-serif; font-size: 12pt; span style= font-family: helvetica, arial, sans-serif; font-size: 12pt; Customer security diligence, questionnaires, trust materials, and vendor reviews /span /li li style= font-family: helvetica, arial, sans-serif; font-size: 12pt; span style= font-family: helvetica, arial, sans-serif; font-size: 12pt; Internal IT and security operations, full stack /span /li li style= font-family: helvetica, arial, sans-serif; font-size: 12pt; span style= font-family: helvetica, arial, sans-serif; font-size: 12pt; AI governance frameworks around data flows, model/vendor risk, prompt injection, jailbreaks, evals, logging, retention, and customer data boundaries /span /li li style= font-family: helvetica, arial, sans-serif; font-size: 12pt; span style= font-family: helvetica, arial, sans-serif; font-size: 12pt; Security policies, runbooks, training, incident response, and internal control documentation /span /li li style= font-family: helvetica, arial, sans-serif; font-size: 12pt; span style= font-family: helvetica, arial, sans-serif; font-size: 12pt; Access governance, admin policies, role-based access, and separation of duties across IT, Engineering, DevOps, and business systems /span /li li style= font-family: helvetica, arial, sans-serif; font-size: 12pt; span style= font-family: helvetica, arial, sans-serif; font-size: 12pt; External security and trust conversations with enterprise customers and prospects /span /li li style= font-family: helvetica, arial, sans-serif; font-size: 12pt; span style= font-family: helvetica, arial, sans-serif; font-size: 12pt; Selection and management of tools, MSPs, and vendors that help Flip scale securely /span /li /ul h2 span style= font-family: helvetica, arial, sans-serif; font-size: 12pt; strong What We’re Looking For /strong /span /h2 ul li style= font-family: helvetica, arial, sans-serif; font-size: 12pt; span style= font-family: helvetica, arial, sans-serif; font-size: 12pt; 6+ years across security, compliance, IT operations, GRC, infrastructure security, or corporate systems /span /li li style= font-family: helvetica, arial, sans-serif; font-size: 12pt; span style= font-family: helvetica, arial, sans-serif; font-size: 12pt; Experience owning or materially operating a SOC 2 program /span /li li style= font-family: helvetica, arial, sans-serif; font-size: 12pt; span style= font-family: helvetica, arial, sans-serif; font-size: 12pt; Experience with MDM, endpoint security, device lifecycle, SaaS access governance, and internal IT operations /span /li li style= font-family: helvetica, arial, sans-serif; font-size: 12pt; span style= font-family: helvetica, arial, sans-serif; font-size: 12pt; Comfort working cross functionally between engineering, sales, and other functions /span /li li style= font-family: helvetica, arial, sans-serif; font-size: 12pt; span style= font-family: helvetica, arial, sans-serif; font-size: 12pt; Ability to speak credibly with enterprise customers about security, compliance, and trust /span /li li style= font-family: helvetica, arial, sans-serif; font-size: 12pt; span style= font-family: helvetica, arial, sans-serif; font-size: 12pt; Strong judgment, high attention to detail, and low tolerance for sloppy access or unclear ownership /span /li li style= font-family: helvetica, arial, sans-serif; font-size: 12pt; span style= font-family: helvetica, arial, sans-serif; font-size: 12pt; Curiosity and fluency around AI governance, LLM security, data boundaries, model/vendor risk, red teaming, and emerging enterprise trust expectations /span /li li style= font-family: helvetica, arial, sans-serif; font-size: 12pt; span style= font-family: helvetica, arial, sans-serif; font-size: 12pt; A builder mindset: you can design the policy, implement the workflow, chase the evidence, clean up the process, and improve it over time /span /li /ul h2 span style= font-family: helvetica, arial, sans-serif; font-size: 12pt; strong Who This Is For /strong /span /h2 p span style= font-family: helvetica, arial, sans-serif; font-size: 12pt; This role is for someone who wants the whole problem. /span span style= font-family: helvetica, arial, sans-serif; font-size: 12pt; Some days, that means joining a strategic customer call about AI governance. Other days, it means tightening an access workflow, cleaning up an Okta group, improving audit evidence, managing a vendor, or building a process that does not exist yet. /span span style= font-family: helvetica, arial, sans-serif; font-size: 12pt; You will not inherit a perfect machine. You will build it. /span /p p span style= font-family: helvetica, arial, sans-serif; font-size: 12pt; If you want a narrow GRC role, this is probably not it. If you want to help define the trust model for AI-native software while also doing the practical work to keep a fast-growing company secure, we want to meet you. /span /p h2 span style= font-family: helvetica, arial, sans-serif; font-size: 12pt; strong More About Flip /strong /span /h2 ul li style= font-family: helvetica, arial, sans-serif; font-size: 12pt; span style= font-family: helvetica, arial, sans-serif; font-size: 12pt; We are international, with teams across the US, UK, and Canada /span /li li style= font-family: helvetica, arial, sans-serif; font-size: 12pt; span style= font-family: helvetica, arial, sans-serif; font-size: 12pt; We have raised $30M+ to date, including our recent $20M Series A /span /li li style= font-family: helvetica, arial, sans-serif; font-size: 12pt; span style= font-family: helvetica, arial, sans-serif; font-size: 12pt; Our investors include Ridge, Next Coast, ScOp, Bullpen Capital, Data Point, Forum Ventures, and founders and executives from companies like Amazon Alexa, Ada, Attentive, and Simon Data /span /li li style= font-family: helvetica, arial, sans-serif; font-size: 12pt; span style= font-family: helvetica, arial, sans-serif; font-size: 12pt; We offer comprehensive healthcare and unlimited vacation, including company-wide time off around July 4 and the end of the year /span /li li style= font-family: helvetica, arial, sans-serif; font-size: 12pt; span style= font-family: helvetica, arial, sans-serif; font-size: 12pt; We are an in-office culture and believe the best work happens when ambitious people build together /span /li /ul p nbsp; /p p span style= font-family: helvetica, arial, sans-serif; font-size: 12pt; #FlippinLegend /span /p div class= content-conclusion p Our customers span the globe, and so do our offices. Flip is committed to providing equal employment opportunities for all employees, applicants, and covered individuals regardless of protected characteristics. We want our company to be as diverse and inclusive as our customers. /p /div

Full responsibilities and requirements are on Flip's application page.

Apply for this job →
About Flip
Hiring for governance, risk, and compliance jobs on GRC Careers.
Search all Flip jobs →

Location and market context

This job is based in Los Angeles on-site. Local candidates benefit from being close to Flip's teams and regional hiring market. Confirm the exact in-office expectation and any relocation support with the employer.

About cybersecurity governance jobs

Cybersecurity governance connects security control frameworks to business and regulatory risk, covering policy, risk assessment, and control assurance rather than hands-on operations. Jobs like this one are typically evaluated against frameworks such as NIST CSF, ISO/IEC 27001, SOC 2, and security risk and control-assurance practices.

How to position yourself for this cybersecurity governance job

Strong candidates emphasize security control frameworks, risk assessment, policy and standards, and translating technical security posture into governance and board-level reporting. In your resume and outreach, tie your experience to how Flip would apply NIST CSF, ISO/IEC 27001, SOC 2, and security risk and control-assurance practices, and lead with concrete outcomes rather than duties.

Similar GRC jobs

IT CYBERSECURITY SPECIALIST (INFOSEC)
Air National Guard Units
Elmendorf AFB, Alaska$109k to $142k
IT CYBERSECURITY SPECIALIST (INFOSEC)
Defense Information Systems Agency
Fort Meade, Maryland$132k to $171k
IT CYBERSECURITY SPECIALIST (PLCYPLN/INFOSEC)
Defense Information Systems Agency
Fort Meade, Maryland$122k to $158k
Computer Scientist (Cyber)
Defense Information Systems Agency
Letterkenny Army Depot, Pennsylvania$150k to $197k
Supervisory IT Cybersecurity Specialist (INFOSEC)
Joint Activities
Fort Meade, Maryland$150k to $197k
Information Technology Specialist (Information Security)
Joint Activities
Fort Bragg, North Carolina$93k to $122k
Get more jobs like this by email
We will email you new GRC jobs in Los Angeles as they post. Free and confidential, one click to unsubscribe.

Know your GRC? Take the 2-minute AI Governance Challenge. No signup needed.
Play now →

More GRC jobs: All GRC jobs · Search by category & location · All CISO & security-leadership jobs · CISO career guide

Need help applying for this job?

Most people send the same résumé to forty roles and hear nothing. These three do something about that.

Free
Career Intelligence tools
Five AI tools: rank your matches, see what the role really demands, find the recruiter behind the posting, build an interview-ready company brief, and know your number before they ask.
Use the free tools →
$75
Résumé review by a GRC professional
A working GRC professional reads it line by line: what clears the ATS, what a hiring manager actually looks for, and which of your experience you are underselling.
Book a résumé review →
$75/hr
Coaching through your search
Someone who has run executive searches for 28 years, working your actual search with you: targeting, positioning, interviews and negotiation.
Book a coaching session →

Free tools need no account. Paid services are delivered by a person, not a template.