Security Lead

Job description

ABOUT THE ROLE Taktile helps financial institutions make smarter, safer decisions with the power of AI. We're looking for a Security Lead to set the technical direction for security across our Platform Team while staying hands-on. This is a high-leverage role with roughly a 50/50 IC-to-management split: you'll own our security architecture and roadmap, drive residual risk down, and lead a team of security engineers, GRC engineers. You'll be the security partner for Engineering and Product on new initiatives, co-own audit readiness with GRC, and set the paved-road patterns that let the rest of the org move fast and safely. If you want to shape the security direction for a fast-growing platform and still build, this role is for you. WHAT YOU'LL DO - Set the security architecture roadmap: threat model, control framework, work on key projects (data classification, secrets management, IAM hardening, supply chain). - Drive residual risk down: own the list, sequence the work, and report to leadership monthly. - Manage a team of security, GRC, and IT Engineers with heavy technical leadership. - Be the security partner for Engineering and Product on new initiatives (AI tooling, Enterprise features). - Co-own audit readiness with GRC: SOC 2, ISO 27001 and customer security reviews. - Stay hands-on: ship automation and services, harden cloud + code and catch threats early. REQUIREMENTS - 5+ years in SaaS product, application, or cloud security. - 2+ years managing a team of security engineers (minimum 2 direct reports). - Deep technical expertise in AWS security, IAM design, and secrets management. - Hands-on experience with DevSecOps in CI/CD, threat modeling, and vulnerability management. - Proven track record of measurably reducing enterprise risk and influencing without authority. - Practical experience driving SOC 2 Type II and ISO 27001 compliance. - Working knowledge of SRE/backend tools and scripting (Python, Bash, Terraform). IDEAL, BUT NOT REQUIRED - Experience in Fintech or another heavily regulated industry. - Relevant certifications such as CISSP, CKS, or AWS Certified Security – Specialty. WHAT WE OFFER - Work with colleagues that lift you up, challenge you, celebrate you and help you grow. We come from many different backgrounds, but what we have in common is the desire to operate at the very top of our fields. If you are similarly capable, caring, and driven, you'll find yourself at home here. - Make an impact and meaningfully shape an early-stage company. - Experience a truly flat hierarchy and communicate directly with founding team members. Having an opinion and voicing your ideas is not only welcome but encouraged, especially when they challenge the status quo. - Learn from experienced mentors and achieve tremendous personal and professional growth. Get to know and leverage our network of leading tech investors and advisors around the globe. - Receive a top-of-market equity and cash compensation package. - Get access to a self-development budget you can use to e.g. attend conferences, buy books or take classes. - Use the equipment of your choice including meaningful home office set-up. OUR STANCE - We're eager to meet talented and driven candidates regardless of whether they tick all the boxes. We're looking for someone who will add to our culture, not just fit within it. We strongly encourage individuals from groups traditionally underestimated and underrepresented in tech to apply. - We seek to actively recognize and combat racism, sexism, ableism and ageism. We embrace and support all gender identities and expressions, and celebrate love in its many forms. We won't inquire about how you identify or if you've experienced discrimination, but if you want to tell your story, we are all ears. ABOUT US Taktile enables financial institutions to transform into AI-native organizations that are increasingly powered by autonomous agents. With our modular Agentic Decision Platform, customers combine AI agents, rules, relevant context, and human oversight to safely automate and optimize their decisions-approving more customers, reimbursing claims instantly, stopping fraud before it spreads, and financing every business worth funding. Founded in 2020, Taktile powers millions of decisions daily for institutions including Mercury, Monzo, Faire, and Pleo. With offices in New York, Berlin, London, São Paulo, and Iași, the company has raised $184M from Growth Equity at Goldman Sachs Alternatives, Index Ventures, Tiger Global, Balderton Capital, and Y Combinator. Learn more at taktile.com http://taktile.com. About Your Employment. Taktile operates through regional entities worldwide. Depending on the location of this role, your employment or engagement will be with Taktile LLC (US), Taktile GmbH (Germany), Taktile Ltd (UK), or Taktile SRL (Romania). The applicable entity will be confirmed during the offer process. Your Privacy. Taktile (“we” or “us”) is the controller of the personal data you provide during this application process. We collect and process your name, contact details, resume/CV, work history, education, and any other information you submit or that we obtain from publicly available sources or references. How we use your data: We process your personal data to evaluate your candidacy, communicate with you about the recruitment process, comply with legal obligations (such as right-to-work verification), and, with your consent, to consider you for future opportunities. Legal basis (EU/UK applicants): We rely on (i) pre-contractual steps at your request (GDPR/UK GDPR Art.6(1)(b)), (ii) legal obligations (Art. 6(1)(c)), and (iii) our legitimate interest in evaluating candidates (Art.6(1)(f)). Retention: If your application is unsuccessful, we retain your data for 12 months after the recruitment process concludes, unless you consent to longer retention. Successful candidates’ data becomes part of their employment records. Your rights: Depending on your location, you may have the right to access, correct, delete, or restrict the processing of your personal data, to data portability, and to withdraw consent. Automated decision-making: We use automated tools to assist in screening applications. No hiring decision is made solely by automated means without human review. International transfers: Your data may be transferred to and processed in the United States, Germany, the United Kingdom, or Romania. Where required, transfers are protected by Standard Contractual Clauses or other approved mechanisms. By submitting your application, you acknowledge that you have read and understood Taktile’s Applicant Privacy Policy. To exercise your rights or ask questions, contact privacy@taktile.com