Director of Security and Privacy Engineering

Banking is being reimagined—and customers expect every interaction to be easy, personal, and instant
. We are building a universal banking assistant that millions of U.S. consumers can use to transact across all financial institutions and, over time,
autonomously drive their financial goals
. Powered by our proprietary BankGPT platform
, this assistant is positioned to displace age-old legacy systems within financial institutions and own the end-to-end CX stack
, unlocking a $200B opportunity and potentially replacing multiple publicly traded companies
. Ultimately,
our mission is to drive financial well-being for millions of consumers.

With over two-thirds of Americans living paycheck to paycheck, 50% holding less than $500 in savings, and only 17% financially literate,
we aim to
put financial well-being on autopilot to help solve this problem.

As the Director of Security & Privacy Engineering
, you will report to the VP of Engineering and play a pivotal role in defining and executing interface.ai’s enterprise-wide security and privacy strategy.

You will build and lead a program that ensures our AI products and cloud infrastructure are secure, compliant, and resilient
, fostering customer trust and meeting regulatory requirements. This is a strategic and hands-on leadership role influencing technology, governance, and culture across the organization. You will lead the development of a secure, compliant, and resilient environment for our AI products and cloud infrastructure — ensuring customer trust and adherence to industry regulations. This is both a strategic and hands-on leadership role that will influence technology, governance, and culture across the organization.

You will be responsible for leading the company’s cybersecurity, privacy, and compliance programs; establishing strong internal controls; managing security risk; and driving security-by-design practices across all engineering and AI initiatives.

As a Director of Security & Privacy Engineering you will be reporting to the VP of Engineering and will be responsible for:

• Own all aspects of Security (excluding physical security), Privacy, and Compliance across the company.
• Develop and enforce security and privacy policies, procedures, and standards, ensuring organization-wide compliance.
• Lead cybersecurity incident response and continuous risk assessment programs.
• Partner with the executive team to align security strategy with business goals and risk tolerance.
• Oversee compliance with GLBA, FFIEC, SOC 2, and other applicable frameworks.
• Champion privacy-by-design principles across product and AI initiatives.
• Partner with Sales, Legal, Compliance, and Product teams to address security inquiries and due diligence requests.
• Deliver executive-level security and risk reports to leadership and the board.
• Collaborate with Engineering and Cloud Infrastructure teams to embed Dev Sec Ops and secure architecture practices.
• Build, mentor, and grow a high-performing team of security and privacy engineers.
• Foster a culture of proactive risk management, innovation, and continuous improvement.

• 12+ years of progressive cybersecurity leadership experience, ideally within financial services, banking, mortgage, or consumer lending industries.
• Experience with Cloud Security and controls especially in AWS environment.
• Strong knowledge and application of lending and consumer protection laws and regulations such as FFIEC, GLBA, etc.
• Knowledge of SOC controls, general IT security, control frameworks and familiarity with ISO 7000 standards.
• Hands-on knowledge of data security, encryption, identity management, and threat modeling.
• Strong interpersonal communication, problem solving, and critical thinking skills.
• Comfortable with balancing multiple, competing priorities and changes in a dynamic fast paced environment.
• Bachelor’s degree in Information Security, Computer Science, or related field .

• Master’s degree in Information Security, Computer Science, or related field.
• Experience in a startup or high-growth SaaS/AI company.
• Certifications such as CISSP, CISM, CCSP, or ISO 27001 Lead Implementer.

• Shape the security, privacy,…