About the company

PE-backed AI consulting and investment firm that transforms enterprises with production AI, spins out new companies and buys operating businesses. Works in regulated environments like healthcare and private markets.

The role: Security and Compliance Lead

Author the firm's security and compliance program end to end: the control framework, evidence pipeline, audit cadence and policies everyone operates under. You'll harden infrastructure and CI/CD, design governance controls for AI systems that touch sensitive data, and build an access-control layer that every deployment inherits. You lead by building; there's no team to manage on day one. A fractional start converting to full-time is possible.

• Get SOC 2 attained and maintained, with HIPAA readiness where required
• Scope controls against the real stack, run the gap assessment and sequence remediation
• Run external audits end to end and the continuous monitoring that follows
• Write identity, device, access-review and SaaS security policies, and audit their execution
• Threat-model AI systems and ship LLM governance controls (PII in prompts and traces, retention, model access, audit trails for agentic actions)
• Front external security reviews with client risk and compliance teams

What they're looking for

• Hands-on ownership of both cloud infrastructure/CI/CD and an IT-admin estate (SSO, device management, access provisioning)
• Ran a SOC 2 or HIPAA program through control design, evidence, audit and continuous monitoring
• Security engineering fundamentals: data-layer access controls, secrets management, network isolation, logging, incident response
• LLM/AI governance literacy and credibility with regulated data
• Track record turning repeated compliance work into reusable tooling or control libraries
• Healthcare or private-markets experience a plus

Location: New York City

Company name shared after an intro call with HSF.