Head of Security & Trust
About the job
- Have built or scaled a security program and be able to work across strategy, technical investigation, and day-to-day execution.
- Have personally led security reviews and customer audits, earned enterprise security teams' trust, and helped resolve deployment blockers.
- Understand cloud architecture, identity and access, data flows, application security, and AI systems well enough to assess risk and work through solutions with engineers.
- Have taken a company through audits or certifications, owning readiness, evidence, remediation, and ongoing program processes.
- Prioritize meaningful risks, make practical tradeoffs, and determine which customer commitments the company can support.
- Explain security and risk clearly to customers, engineers, and leadership, and create accountability across teams.
- Own the security strategy, roadmap, and operating program, with clear priorities, owners, and reporting on risk and progress.
- Lead enterprise security reviews, technical diligence calls, questionnaires, and customer audits; partner with Sales and Legal on security requirements and contractual commitments.
- Build and maintain the Trust Center, security documentation, architecture overviews, and reusable responses; automate evidence collection and review workflows to improve speed and accuracy.
- Own the roadmap and execution for SOC 2, ISO 27001, and ISO 42001, including gap assessments, control implementation, auditor coordination, remediation, and ongoing maintenance.
- Establish AI governance with Product, AI Research, Engineering, and Legal, including AI risk assessments, model and vendor reviews, data-handling practices, human oversight, and documented responsibilities.
- Partner with Engineering to strengthen access controls, cloud and application security, tenant isolation, vulnerability management, and protections for AI agents and customer data.
- Translate recurring customer concerns into product and security improvements, and select the tools, external partners, and future hires needed to scale the function.
- Have implemented an AI management system or led ISO 42001 certification.
- Have supported life sciences organizations, financial institutions, law firms, or other highly regulated enterprise customers.
- Have worked at an AI company or a high-growth enterprise software company.
- Have experience with AI agent security, model-provider risk, privacy programs, or NIST AI RMF.
- Have built security or compliance automation and be familiar with cloud environments such as AWS or Azure.
- Hold relevant credentials such as CISSP, CISM, or ISO 27001/42001 Lead Implementer or Lead Auditor.
About the company
Valkai builds an agent orchestration layer for pharmaceutical, biotech, and medical device companies, connecting the siloed systems, teams, and outside data that make development slow. Its agents run on an organization's own SOPs, precedents, and regulatory context, draw on more than 100 data sources, and execute multi-step workflows that end in review-ready documents with citations, covering everything from discovery through commercialization. The company says more than 200 agent systems coordinate work across those stages, and it deploys through private cloud or managed SaaS. Unlike a general-purpose assistant, the agents are bound to the procedures and evidence standards a regulated submission requires. The company's goal is to compress work that currently takes months into weeks by removing the handoffs between systems.
Company Size
N/A
Company Stage
N/A
Total Funding
N/A
Headquarters
N/A
Founded
N/A
Simplify's Take
What believers are saying
- AbbVie's September 29, 2026 deal creates a marquee reference for other pharma buyers.
- Clinical data growth drives manual-review pain, increasing demand for Valkai's automation layer.
- Valkai's compliance positioning around GDPR, SOC2, CLIA, and CAP lowers procurement friction.
What critics are saying
- AbbVie is a single public proof point; losing it crushes credibility in 2026.
- No disclosed pricing, rollout scope, or performance metrics leaves renewal risk unresolved.
- Competitors like Microsoft, Google, and Insilico can bundle similar AI into existing stacks.
What makes Valkai unique
- AbbVie partnered with Valkai on September 29, 2026, validating enterprise clinical-development demand.
- Valkai targets life sciences workflows, combining data extraction, document preparation, and workflow automation.
- Its team markets experience from OpenAI, Google DeepMind, Sierra, and Glean.
Help us improve and share your feedback! Did you find this helpful?
Benefits
- Health Insurance
- Dental Insurance
- Vision Insurance
- Paid Vacation
- Paid Parental Leave
- Company Equity