Senior Information Security Analyst II (AI Focus) About the Opportunity at Invoca At Invoca, we offer a truly unique and valuable engineering experience. Youll join a team of world-class engineers dedicated to scaling our AI and Information Security program within our rapidly growing company and SaaS application. We empower you to discover innovative ways to secure our platform and people. Our remote-first team is committed to upholding high standards through modern methodologies of agile software development, test-driven development, and DevOps. Our Information Security Team: A Culture of Empowerment and Ownership Our Information Security team is dedicated to building trust and resilience into everything we do at Invoca. We embed security and compliance into our products and operations, enabling the company to move quickly and confidently without sacrificing safety. By combining security engineering expertise with compliance excellence, we protect our platform, meet and exceed industry standards, and empower innovation. If you’re passionate about solving complex challenges, driving a security-first mindset, and helping build a culture of trust, you’ll find a home here. You’ll join a team where everyone is striving to constantly improve their knowledge of tools, practices, and processes. We are an incredibly supportive team, swarming when problems arise and providing great feedback to help each other grow. Working on our close-knit, cross-functional teams offers a fantastic opportunity to expand your knowledge across various domains, from databases to front ends to telephony and everything in between. We are passionate about continuous improvement, working at a brisk but sustainable pace, writing resilient code, maintaining production reliability, paying down technical debt, and hiring fantastic teammates; and we love to share these passions with each other. Learn more about the Invoca development team on <a href="https://medium.com/invoca-engineering-blog">our blog</a> and check out our <a href="https://github.com/Invoca?type=source">open source projects</a>. How Youll Contribute and Grow <ul> <li>Shape AI &amp; Security Compliance: Youll play a key role in executing a comprehensive global AI and security compliance strategy, aligning with our business objectives and values. Youll contribute to ensuring compliance with international regulations and frameworks such as ISO 42001, ISO 27001, PCI DSS 4.0, SOC 2, GDPR, CCPA, and HIPAA. Youll collaborate with diverse teams (Product, Engineering, AI/ML, HR, Legal, Sales) to foster responsible and ethical AI practices through policies, controls, and communications.</li> <li>Strengthen Audit &amp; Risk Management: Youll participate in regular internal and external AI and information security audits, ensuring our compliance programs are effective. Youll help identify control gaps, provide context to risk owners, and contribute to improvements that mitigate compliance and AI-related risks. Youll also work across teams to build a comprehensive risk register and offer guidance on Third-Party Risk Management (TPRM) and vendor risk management.</li> <li>Advance Policy &amp; Program Development: Youll assist in creating and updating policies to address internal and external threats, including emerging AI risks like adversarial AI, data poisoning, and model drift. Youll help embed responsible AI and security practices into our development lifecycle through policies, playbooks, continuous monitoring, and governance guardrails.</li> <li>Build Customer Trust &amp; Enable Sales: Youll support our Customer Success and Sales teams by responding to customer AI and security questionnaires, identifying opportunities for automation and process improvement. Youll build customer confidence in Invocas AI systems and compliance programs through direct interactions and develop scalable solutions for sales enablement, including standardized compliance documentation and AI risk transparency materials.</li> <li>Drive Education &amp; Awareness: Youll keep stakeholders informed about new AI regulations and compliance changes, proactively preparing the organization for third-party audits and certifications. Youll train employees on AI risk management, ethical AI principles, and compliance responsibilities, promoting awareness of AI trust, accountability, and transparency across the organization.</li> <li>Team Enablement &amp; Leadership: Youll provide roadmap guidance for the long-term direction of AI and compliance practices within the team. Youll mentor junior team members, helping them build skills in AI compliance, auditing, and governance frameworks, and participate in on-call rotations to support security operations, incident response, and production reliability.</li> </ul> What Were Looking For in You <ul> <li>Strong knowledge and experience with compliance frameworks, including ISO 42001, ISO 27001, PCI DSS 4.0, SOC 2, GDPR, HIPAA, and CCPA.</li> <li>Understanding of AI risk management, governance, and ethical AI principles (bias, fairness, transparency, accountability).</li> <li>Excellent verbal and written communication skills with the ability to explain complex AI compliance requirements to diverse teams.</li> <li>Experience with compliance audits, evidence collection, and policy creation for both security and AI systems.</li> <li>Team leadership or project management experience, with a proven ability to mentor and influence cross-functional stakeholders.</li> <li>Familiarity with operational security practices: log analysis, incident response, on-call participation, and escalation management.</li> <li>Understanding of modern technical environments, including cloud computing, Infrastructure as Code, CI/CD pipelines, and SDLC processes.</li> <li>Deep understanding of AI policy domains such as explainability, transparency, fairness/non-discrimination, accountability, and the ability to design practical monitoring (e.g., fairness trackers) that align with evolving standards.</li> <li>Depth of knowledge beyond surface-level compliance, with the ability to adapt in the face of a rapidly changing and evolving AI regulatory landscape.</li> </ul> This role is remote and open to candidates located in the United States and Canada only. Please note that we are unable to provide visa sponsorship for this position. Salary, Benefits &amp; Perks: At Invoca, all new hires in the U.S. receive benefits starting on day one of employment. Our benefits offerings include: Please note that benefits for teammates outside the U.S. may vary in accordance with their country’s laws and regulations. <ul> <li>Flexible Time Off – We encourage a healthy work-life balance. Our flexible paid time off policy allows you to recharge and take time away as needed.</li> <li>Paid Holidays – Invoca provides 16 U.S. paid holidays, including a winter break, giving you ample opportunity to refresh and spend time with friends and family.</li> <li>Health Benefits – Our healthcare program includes medical, dental, and vision coverage, with multiple plan options so you can choose what works best for you and your family. Fertility assistance is also included.</li> <li>Retirement – Invoca offers a 401(k) plan through Fidelity with a company match of up to 4%.</li> <li>Stock Options – All employees are invited to share in Invoca’s success through stock options.</li> <li>Mental Health Program– Well-being support on a broad range of issues is available through our SpringHealth program.</li> <li>Paid Family Leave – Up to 6 weeks of 100% paid leave is provided for baby bonding, adoption, and caring for family members.</li> <li>Paid Medical Leave – Up to 12 weeks of 100% paid leave is provided for childbirth and medical needs.</li> <li>InVacation – As a thank-you to our long-term team members, we offer a bonus after 7 years of service.</li> <li>Wellness Subsidy – We provide a subsidy that can be applied toward gym memberships, fitness classes, and more.</li> <li>Position Base Range - Salary Range $107,000 - $161,000/yr plus bonus potential</li> </ul> <h4>DEI Statement</h4> Our company is committed to creating a culture that is not only grounded in continuous learning, teamwork, and customer success, but is fair, equitable, and welcoming for everyone.” Gregg Johnson CEO And to us, diversity and inclusion means even more than treating current employees well and making them feel welcome. It also means proactively hiring people who bring different insights because of their unique demographics, ways of thinking, and prior experiences. We intend to continue hiring great people and protecting our culture so everyone can be themselves and speak their minds. That way Invoca will always be a place filled with laughter, energy, hard work, thoughtfulness and respect. We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender, gender identity or expression, or veteran status. We are proud to be an equal opportunity workplace. #LI-Remote