Tutor Chat AI is building an AI‑powered tutoring platform designed specifically for K‑12 and higher education institutions. Our mission is to provide curriculum-aligned, 24/7 GPT -4–based support integrated with platforms like D2L and PeopleSoft. We’ve secured pilot interest from schools and college networks and are now assembling a founding team to scale. We’re a lean, mission‑driven startup seeking a Founding Engineer ready to help shape the future of education technology.

Location: Remote (U.S.-based), occasional alignment with the Houston, TX timezone

Compensation:

Equity grant (typically ~ 0.5% of the company, fully negotiable)
Option for milestone-based top‑up grants or bonuses tied to key deliverables

About the Role

TutorChatAI is looking for a Head of Security to build and lead our security function from the ground up. This is a hands-on, high-impact role for someone who can both drive strategic security initiatives, including achieving critical compliance certifications like SOC 2 and GOV-RAMP, and roll up their sleeves to improve our day-to-day security posture across infrastructure, applications, and data.

You will be the senior-most security leader in the company, responsible for establishing our security program, policies, and culture as we scale.

What You'll Do

Lead compliance and certification efforts, with SOC 2 (Type I and Type II) and GOV-RAMP as the immediate priorities, and lay the groundwork for future certifications as the company grows
Assess and improve overall security posture, including infrastructure security, application security, identity and access management, and data protection practices
Design and implement security policies and procedures covering incident response, vendor/third-party risk management, secure SDLC, access control, and employee security awareness
Partner cross-functionally with Engineering, Product, and Legal to embed security practices into the development lifecycle without slowing down delivery
Own vendor and audit relationships, including selecting and managing auditors and compliance automation tooling.
Conduct risk assessments and manage a risk register, prioritizing remediation efforts based on business impact
Establish security monitoring and incident response capabilities, including logging, alerting, and a documented incident response plan
Build and lead a security function as the team grows, including future hiring and mentoring of security engineers
Communicate security posture and risk to leadership and, where relevant, to customers and prospects during due diligence/security reviews

What We're Looking For

5+ years of relevant security experience, including experience with security program management, application/infrastructure security, or a related discipline
Direct experience leading or significantly contributing to a SOC 2 or GOV-RAMP certification process, ideally from initial readiness through audit completion
Strong understanding of cloud security (GCP), modern application architectures, and common attack vectors
Experience building security policies, processes, and controls in a growing or resource-constrained environment (startup/scale-up experience a plus)
Familiarity with security and compliance automation tooling
Excellent communication skills and able to translate technical risk into business terms for leadership, customers, and non-technical stakeholders
A pragmatic, risk-based approach to security that balances protection with the need to move quickly
Experience securing AI/ML systems or LLM-based products specifically (data privacy, model security, prompt injection risks, etc.)
Experience achieving multiple compliance frameworks (ISO 27001, FERPA, GDPR, GOV-RAMP, SOC 2)
Experience with compliance platforms like Secureframe

Tutor Chat AI jobs

Head of Information Security

Never Miss a New Opportunity