Head of Security & Business AI Applications

In this role, you will

• Build the infrastructure to support teams building AI-powered internal tools and infrastructure, deploying LLM-based automations, internal copilots, and agentic workflows to improve how Anrok operates at scale
• Lead Anrok’s application security program, partnering with engineering to identify risks, drive secure development practices, and protect sensitive customer financial data
• Own corporate IT infrastructure and operations—including endpoint management, SaaS stack administration, and IT support—managing and developing our IT team member
• Own all compliance obligations end-to-end, including SOC 2 Type II, ISO 27001, and GDPR—serving as the DRI for audits, renewals, and cross-functional readiness
• Develop and enforce security policies, access controls, and governance frameworks that grow with the business
• Partner with Legal and Finance on data privacy obligations, vendor risk management, and third-party security assessments
• Evaluate, procure, and manage the internal technology stack, ensuring we’re using the right tools as we scale
• Report on security and compliance posture to executive leadership as needed

What excites us

• 10+ years in IT, security, or a related technical role, with 3+ years in a leadership position at a scaling tech company
• Hands-on experience building or deploying AI/LLM-powered internal tools or automations—you default to AI-first solutions for operational problems
• Strong application security fundamentals—you can review AppSec findings, work with engineers on remediations, and evaluate risk without needing to write the code yourself
• Genuine familiarity with GDPR and international data privacy obligations, relevant to a fintech handling customer financial data across jurisdictions
• Track record of building lightweight but durable compliance and governance programs—practical, not checkbox theater
• Proven ownership of SOC 2 Type II renewals end-to-end—you’ve been the DRI, not just a contributor
• Technically credible with strong business fluency: you can present to a board, negotiate a vendor contract, and review a penetration test in the same week
• Self-starter who thrives in ambiguity, builds scalable systems, and knows when to automate vs. hire
• You’re curious and motivated to learn new tools — you've experimented with AI in your work or on your own, you're excited about what's possible, and you've built something with it (an application, a workflow, a creative solution to a real problem) that you can walk us through.