Casca
Head of Security & Compliance
$200K–$300K
San Francisco · On-site · Director · Full-time · Posted Jun 26, 2026
- Experience
- 5+ years in progressive security roles, with at least 2+ years at a B2B tech, fintech, or highly regulated SaaS company.
About the job
Leads security and compliance for Casca’s AI-driven banking product, building security processes, protecting agent workflows, and owning incident response and compliance programs.
What you'll do
- Build security tooling and processes for application security, identity and access management, threat detection, and secure development.
- Manage and mentor application security engineers; mature secure SDLC, threat modeling, and vulnerability management.
- Secure AI agent workflows, lead incident response, and own the compliance roadmap, including SOC 2, SOC 1, and ISO 27001.
What they ask for
- 5+ years in progressive security roles, including at least 2+ years at a B2B tech, fintech, or highly regulated SaaS company.
- Strong fundamentals in secure SDLC, cloud security (AWS/GCP), Web security, and DevSecOps practices.
- Proven track record owning SOC 2 Type II and/or ISO 27001 compliance.
- Experience leading incidents end to end and driving remediation.
Nice to have
- Experience securing LLM usage for coding and product use cases and mitigating agentic-system risks.
- Experience in fintech or banking.
Pay
$200K – $300K USD base salary
Tools
AWS, GCP, SOC 2, SOC 1, ISO 27001, LLM
AI focus
Secure AI-driven workflows and agent execution, including data privacy, safe agentic identity, and risks such as unauthorized agent actions, prompt injection, and data poisoning.
Model-written summary · the original posting is authoritative