Head of Security & AI Governance at Flip
Los Angeles, CA
—
Jul 18, 2026
Los Angeles, CA
Jul 21, 2026
What this job asks for AI summary
A hands-on leadership role responsible for owning security, compliance, IT operations, and AI governance at a Voice AI company serving enterprise clients. Day-to-day work spans SOC 2 and HIPAA programs, access governance, internal IT, vendor diligence, and building frameworks around LLM-specific risks such as prompt injection, model risk, and data boundaries. Suited to someone with broad GRC and infrastructure security experience who also wants to shape emerging AI trust standards.
Senior level · 6+ years · Los Angeles-Long Beach-Anaheim, CA · Full-time
We read this from the posting text with AI. Skim the description below before ruling yourself out.
How this req sits in the market our data
Roughly 95 people in the Los Angeles-Long Beach-Anaheim, CA area plausibly meet what this posting asks for (information security analysts). range 30–150
Applicant volume Moderate — A normal amount of company. The rare requirements below are what will separate a shortlisted application from the rest.
Most people in this occupation already list these. Still required — just not what gets you shortlisted.
What the occupation pays Median $132,481 (middle half $96,915–$170,448).
Estimated from BLS employment for this occupation and area, per-skill prevalence across our listing corpus, and published wage benchmarks — as of Jul 28, 2026. It is a model, not a headcount.
Why we read it this way (6)
The role title is 'Head of Security & AI Governance' with no explicit seniority level word, so advertised seniority is Unspecified. The 6+ years requirement and broad ownership scope (SOC 2, HIPAA, IT ops, AI governance, customer-facing trust) support a Senior classification.
This role sits between 15-1212 (Information Security Analysts) and 11-3021 (Computer and Information Systems Managers). The posting emphasizes hands-on, individual-contributor execution ('rolling up their sleeves', 'build the systems') over people management, which tips toward 15-1212 as the primary SOC, but the 'Head of' framing and cross-functional ownership introduce genuine ambiguity.
AI governance, LLM security, prompt injection, and red teaming are described with 'curiosity and fluency' language ('comfort', 'fluency around') in the requirements section rather than hard-gate language, so they are marked as preferred.
No compensation figures are stated in the posting.
The role is fully onsite Monday–Friday in Marina del Rey, CA (Los Angeles metro).
Ignored 4 non-technology phrase(s) as skills (responsibilities/concepts, not named tools): SaaS access governance, vendor risk management, role-based access control, AI governance.
Read the full posting
The employer publishes the full description on their own site — read it there ↗. Or sign in to read it here — it's free, and it also lets you track this application.