Our Mission

Rebuild how the world works, to make institutions work better for the people they serve.

About Brain Co.

Brain Co. builds AI-native operating systems for large, regulated institutions. Each system is built for a specific industry, powered by agents that push real workflows forward. Underneath it all is Atlas, our proprietary platform that keeps customers in control, secure by design, and never locked into one model.

Why Now

Brain Co. is entering its next phase of production deployments on a national scale with an elite team built from Palantir, Google, Meta, and Nvidia, and a growing footprint across government, insurance, health, and financial services.

Joining now means shaping both the company and a new category of applied AI. Every project here ships to production and is expected to create measurable customer value and impact.

You'll work alongside exceptional peers on some of the hardest problems in applied AI. It’s the kind of work you'll still be proud of in ten years from now.

At Brain Co., we focus on applying frontier AI to real institutional challenges, working alongside governments, healthcare systems, and critical industries to modernize how essential services operate. We are looking for leaders who want to help bring new technology into institutions that impact millions of people.

Security work at Brain Co. does not stay inside the security team. Audit readiness needs Engineering, HR, Finance, and Legal. Enterprise deals stall on security questionnaires and customer security reviews. Identity spans IT and Security, and neither can finish it alone. Vulnerability remediation lands on engineering teams that don’t report to us. Someone has to own the delivery of that work end-to-end: the plan, the owners, the cadence, and the finish line. That’s this role.

Brain Co. carries one of the most demanding regulatory loads of any company our size: SOC 2 Type II and HIPAA in place today, with ISO 27001, NIST 800-171, and FedRAMP/GovRAMP on the near-term roadmap. That’s what it costs to sell to governments, hospitals, and financial institutions and done right, it’s how we win the next ones.

As our first Technical Program Manager on the Security team, you’ll run the security programs that touch every part of the company from the security review that unblocks a government deal, to the identity program that spans IT and Security, to the incident process the whole company depends on. You’ll report to the Head of Security as an individual contributor with the scope and trust to define how security programs run here.

This is not a ticket-herding job. You’ll be technical enough to read an IAM policy, follow an architecture diagram, and push back on a remediation plan that doesn’t hold up, and operational enough to turn a recurring mess into a system that runs without you in the room.

You won’t be doing this alone. Security, IT, GRC, Engineering, and GTM all want these programs to move. You’ll arrive with teams that are eager to be pulled in rather than dragged, and partners who’ll do the work if you give them a clear plan and a clear finish line. What’s been missing is the person who holds the whole picture, not the willingness to help.

What You’ll Work On

• Drive security sales enablement operations: the operational backbone of the customer trust surface. Security questionnaires, RFP security sections, the trust portal, DPA/BAA intake, and customer security reviews. Build the reusable answer library, evidence packages, and intake process so no deal restarts from scratch and security is never the reason a cycle slips in close partnership with GRC.

• Vendor Management Process: Complete Vendor Security Reviews for vendors that will be both internal/ corporate vendors and vendors supporting customer facing products/ services. Understanding the difference between what is required for each of those types of vendors. Awhile looking for ways and streamline our vendor management process.

• Support audit readiness as a delivery program, not a scramble. Own the plan behind SOC 2 Type II and HIPAA today and the path through ISO 27001, NIST 800-171, and FedRAMP/GovRAMP, control owners, evidence collection, gap remediation tracking, auditor logistics, and readiness milestones, in close partnership with GRC.