Senior Security, Trust & Compliance Engineer

About Actively AI

Our thesis is that businesses of the future will be powered by agentic human-in-loop-machines that make every business function 10x more efficient.

Actively AI is building that superintelligent machine for Enterprise GTM organizations, focused on increasing productivity per rep. We power the day-to-day for outbound teams at dozens of companies like Samsara, Ramp, Verkada, and Ironclad.

Why does this matter? Because revenue is the ultimate fuel for businesses. The hundreds of millions of dollars we generate for our customers enables them to employ more people, innovate faster, and deliver more value to their customers.

In addition to top-notch customers that love our product, our team is incredibly high caliber - the co-founders are former Stanford AI researchers and the engineering team comes from Harvard, CMU, Berkeley, Brex, Scale AI, and Google. We're also backed by top investors, including Bain Capital Ventures, First Round Capital (seed investors in Uber, Square, Roblox, Clearbit), Lachy Groom, and Stanford AI faculty.

We have a very ambitious product and scaling roadmap, there’s strong market interest in what we are doing, and it’s time to put the foot on the gas. If you get excited by the thought of working really hard on these kinds of problems with a high caliber team, then Actively AI is the right place for you.

About the Role

Actively is building AI-powered per-account agents that operate inside our customers’ GTM systems, including Salesforce, Outreach, Gong, Slack, and internal CRMs. Our product handles highly sensitive enterprise data and takes actions on behalf of users — which makes trust, security, and compliance core to our value proposition.

We’re hiring our first Senior Security, Trust & Compliance Engineer to build Actively’s security program from the ground up. This role spans customer trust, compliance, cloud security, governance, and product-integrated security. You’ll own both the technical and compliance sides of security while designing the foundations that will support Actively’s hypergrowth.

If you love 0→1 building, enjoy working cross-functionally with engineering and GTM teams, and want to architect a world-class trust program at a fast-moving AI company, this role is for you.

What You’ll Do

Your primary focus areas will be Customer Trust, Governance & Risk, and Security Operations. Product Red Team & AI/LLM Guardrails will grow as our product surface expands.

Customer Trust & Compliance

• Own and maintain our Vanta knowledge base, policies, subprocessors, and architecture documentation.
• Maintain and evolve our Trust Center with accurate documents, CAIQLite, and security materials.
• Keep CAIQLite current as the product evolves and reduce VSQ volume through scalable processes.
• Serve as the POC for GTM on customer VSQs and participate in security-related customer conversations.

Governance & Risk

• Lead SOC2 Type II readiness: control mapping, evidence collection, documentation, and interactions with auditors.
• Support ISO 27001 readiness by aligning controls and establishing core ISMS processes.
• Own vendor & subprocessor security lifecycle (onboarding, DPAs, annual reviews, ongoing monitoring).
• Run governance processes including quarterly access reviews, policy updates, and risk assessments.
• Own the Incident Response Program, including IR plans, runbooks, and tabletop exercises.
• Oversee logging, auditability, monitoring, and alerting for sensitive systems and high-risk actions.

Security Operations

• Manage access controls across employees, contractors, and service accounts.
• Own credential & secrets management for all customer integrations (Salesforce, Outreach, Gong, Slack, Google).
• Ensure strong cloud security posture across GCP, Databricks, Vercel, and BigQuery (IAM, network boundaries, misconfigurations).
• Coordinate external penetration tests and drive remediation efforts.
• Conduct lightweight internal security reviews of high-risk product surfaces.

Product Red Team & AI/LLM Guardrails

• Participate in security and privacy review of new product experiences.
• Define secure data separation patterns and guardrails to prevent cross-customer data leakage.
• Ensure audit