Head of Security & Compliance

About the role

Casca is building AI‑native technology for banking and needs a senior leader to define and execute its security and compliance strategy. You will shape security tooling, drive compliance programs, and lead a team of application security engineers.

Key responsibilities

• Build security tooling and processes that engineers actually use, including appsec, identity & access management, and threat detection.
• Manage, mentor, and grow a team of application security engineers while maturing the Secure SDLC, threat modeling, and vulnerability management.
• Secure the agent execution surface and partner with engineering and product to establish robust security architecture for AI‑driven workflows.
• Drive customer trust by owning and expanding the compliance roadmap (SOC 2, SOC 1, ISO 27001) and collaborating with go‑to‑market and legal teams.
• Lead incident response and detection, building the detection pipeline and turning events into systemic improvements.

Required profile

• 5+ years in progressive security roles, with at least 2 years at a B2B tech, fintech, or highly regulated SaaS company.
• Strong fundamentals in secure SDLC, cloud security (AWS/GCP), web security, and DevSecOps practices.
• Ability to develop lightweight, durable security policies, access controls, and data‑governance frameworks.
• Comfortable leading incident response from detection through remediation.
• Thrives in ambiguity, can ruthlessly prioritize fixes, and balances security with business velocity.

Required skills

• Secure SDLC
• Cloud security – AWS, GCP
• Web security
• DevSecOps
• Application security
• Identity and Access Management (IAM)
• Threat detection
• SOC 2 compliance
• ISO 27001 compliance
• Incident response

What we offer

• Impact and ownership: shape the future of banking through AI.
• Collaborative environment with a passionate, knowledge‑sharing team.
• Competitive compensation including salary, benefits, and potential equity.
• Professional growth through mentorship and strategic influence.
• Culture of innovation that encourages risk‑taking and learning from failures.