Security & Governance Lead

About the Role As Security & Governance Lead at Alinia AI, you will play a foundational role in shaping the company's internal security, governance, and compliance practices as we scale our AI Auditing & Compliance platform for AI Agents in regulated industries. We are building critical safety and governance infrastructure for AI agents used in f inance and other highly regulated environments. In this role, you will be responsible for ensuring that Alinia operates with a strong, auditable, and scalable security and compliance posture, while supporting enterprise customer procurement, SLAs, and trust requirements. This is a hands-on, high-impact role for someone who thrives in a fast-paced startup, can operate autonomously, and wants to define how security and governance should be built in an AI-first company. Responsibilities Security, Governance & Compliance Operations ● Own and maintain Alinia's internal security and compliance posture. ● Manage Vanta as the central compliance and evidence management platform. ● Review, update, and maintain all security, privacy, and governance policies. ● Produce and maintain up-to-date risk assessments, security reports, and compliance processes. ● Centralise and document Alinia's technical stack, data flows, and security controls. ● Create internal guides, playbooks, and training materials related to security and governance. Certifications & External Assurance ● Own and manage existing certifications and frameworks, including SOC 2 and GDPR. ● Plan and coordinate annual vendor reviews, third-party risk assessments, and penetration tests. ● Define and execute Alinia's 12‐month security and compliance roadmap, including: ○ EU AI Act ○ ISO/IEC 42001 ○ ISO 27001 Customer Procurement & SLA Management ● Own security and compliance procurement processes with enterprise customers. ● Act as procurement owner for security, privacy, and governance-related requests. ● Lead responses to customer security questionnaires, audits, and vendor risk assessments. ● Own SLA management and act as project manager for customer-related security and compliance queries. ● Partner closely with Sales, Product, and Engineering to unblock deals and maintain customer trust. Requirements ● 6+ years of experience in security, governance, risk, or compliance roles, ideally in a SaaS or cloud-native environment and AI-native projects. ● Hands-on experience managing security and compliance programmes (not purely advisory). ● Proven experience with security certifications (SOC2, ISOs) and GDPR in an operational context. ● Experience using compliance automation platforms such as Vanta, Drata, or Secureframe. ● Strong understanding of cloud security, SaaS architectures, and vendor risk management. ● Ability to translate regulatory and compliance requirements into practical, scalable processes. ● Clear written and verbal communicator in Spanish and English, comfortable working cross-functionally. ● Based in Spain. Nice-to-Have ● Experience with ISO 27001 and/or ISO/IEC 42001 certifications. ● Familiarity with EU AI Act requirements or AI governance frameworks. ● Background in regulated industries such as financial services, military or health. ● Experience supporting enterprise procurement and security reviews. ● Previous experience in early-stage or high-growth startups. Why Join Alinia ● Build and own the security and governance foundation of a fast-growing AI governance company. ● Work on problems at the intersection of AI, regulation, and enterprise software. ● Early, high-impact role with direct influence on customer trust and revenue. ● Collaborate closely with founders and leadership on strategic compliance initiatives. ● Competitive compensation and meaningful equity. ● Growth potential and leadership path.