About Interface.ai

interface.ai is redefining how financial institutions serve their members through agentic AI and conversational AI — and we're doing it in production, at scale, with real outcomes. $30M in Series A funding. Cash-flow positive. A mission that matters: democratizing financial wellness for every American, not just the ones who can afford a private banker.

About the Role

As the Head of of Security & Privacy Engineering, you will report to the VP of Engineering and play a pivotal role in defining and executing interface.ai’s enterprise-wide security and privacy strategy.You will build and lead a program that ensures our AI products and cloud infrastructure are secure, compliant, and resilient, fostering customer trust and meeting regulatory requirements. This is a strategic and hands-on leadership role influencing technology, governance, and culture across the organization. You will lead the development of a secure, compliant, and resilient environment for our AI products and cloud infrastructure — ensuring customer trust and adherence to industry regulations. This is both a strategic and hands-on leadership role that will influence technology, governance, and culture across the organization.

You will be responsible for leading the company’s cybersecurity, privacy, and compliance programs; establishing strong internal controls; managing security risk; and driving security-by-design practices across all engineering and AI initiatives.

What you will do

As a Head of Security & Privacy Engineering you will be reporting to the VP of Engineering and will be responsible for:

Own all aspects of Security (excluding physical security), Privacy, and Compliance across the company.

Develop and enforce security and privacy policies, procedures, and standards, ensuring organization-wide compliance.

Lead cybersecurity incident response and continuous risk assessment programs.

Partner with the executive team to align security strategy with business goals and risk tolerance.

Oversee compliance with GLBA, FFIEC, SOC 2, and other applicable frameworks.

Champion privacy-by-design principles across product and AI initiatives.

Lead security and privacy initiatives for AI-powered products, ensuring safe deployment of generative AI, LLM-driven systems, and AI workflows through secure architecture, risk mitigation, and responsible AI governance.

Partner with Sales, Legal, Compliance, and Product teams to address security inquiries and due diligence requests.

Deliver executive-level security and risk reports to leadership and the board.

Collaborate with Engineering and Cloud Infrastructure teams to embed Dev SecOps and secure architecture practices.

Build, mentor, and grow a high-performing team of security and privacy engineers.

Foster a culture of proactive risk management, innovation, and continuous improvement.

Requirements

12+ years of cybersecurity leadership experience, ideally within financial services, banking, fintech, or regulated environments.

AI & Generative AI Security Mindset: Experience securing AI-driven platforms, LLM workflows, or AI-powered products, including awareness of emerging AI risks such as prompt injection, data leakage, and model misuse

Cloud Security Expertise: Strong experience securing cloud-native infrastructure, particularly AWS, including identity management, network security, container security, and infrastructure protection

Security Architecture & DevSecOps: Ability to embed security-by-design practices across distributed systems, APIs, microservices, and CI/CD pipelines

Data Security & Privacy Engineering: Deep knowledge of data protection, encryption, identity and access management (IAM), and threat modeling, especially for sensitive financial data

Regulatory & Compliance Leadership: Strong understanding of GLBA, FFIEC, SOC 2, and enterprise security frameworks, with experience building compliant security programs

Executive Leadership & Communication: Proven ability to lead security programs, communicate risk to executive stakeholders, and build high-performing security and privacy engineering teams