Security Risk and Compliance Agent Security

Skills

About the Role

You will establish policies, standards, review criteria, and data-governance requirements for AI agents. You will evaluate agent security and compliance risks, map controls to governance frameworks, oversee approval and exception processes, and adapt controls with security, research, and engineering partners.

Requirements

• 8+ years of security governance, risk, and compliance experience
• Experience owning security policies and control standards at a technology company
• Experience protecting sensitive data, PII, or intellectual property
• Knowledge of identity, access, and least-privilege controls
• Ability to reason from threat models to controls
• Experience defining risk-based review or approval criteria in engineering workflows
• Ability to create clear written material for technical and non-technical audiences

Responsibilities

• Author policies and standards for AI agent governance
• Define review and approval criteria for agents handling sensitive or regulated data
• Review agent security within engineering approval workflows
• Define agent data-governance requirements, including least-privilege access and access reviews
• Monitor agent behavior and adapt governance requirements
• Map agent controls to AI governance frameworks
• Assess and document agent-related security and compliance risks
• Own policies for agent-related risk acceptances and exceptions

Benefits

• Optional equity donation matching
• Generous vacation
• Parental leave
• Flexible working hours