Director of Security

Posted: 2026-10-28

About Prophecy

The leader in AI-native data preparation and analysis, Prophecy is revolutionizing how the world's top enterprises turn data chaos into reliable insights. We introduce the AI-native data lifecycle (generate, refine, deploy) where our industry-leading AI agents and humans work hand-in-hand in visual and document interfaces to analyze, transform, and prepare data to ship trusted insights at enterprise scale. Join us as we build the next data revolution.

Prophecy is entrusted by some of the world's largest organizations, including leading banks and telecoms, to handle sensitive, business-critical data. We've built a strong security foundation to earn that trust, including ISO/IEC 27001:2022 certification and SOC 1 Type II and SOC 2 Type II reports, and now we're hiring our first dedicated security leader to take it to the next level, especially as AI agents become central to how our customers work with their data.

You'll own security end-to-end and lead a small team of security engineers and IT staff as a player-coach: setting strategy while doing much of the hands-on work yourself. You will be responsible for product and AI security, cloud and infrastructure security, compliance, and customer trust, along with the corporate security strategy that supports them. You'll partner closely with our engineering teams across the US and India, and with our go-to-market team as they sell into some of the world's most security-conscious enterprises. This role reports directly to the CTO.

Security Strategy and Program

- Own Prophecy's security strategy and roadmap across product, cloud infrastructure, and corporate environments.

- Build and scale the security program, including policies, controls, risk assessments, and a clear view of where to mitigate risk and where to accept it.

Product Security

- Partner with Engineering across the US and India to embed security into how we design, build, and ship our AI agents and data platform.

- Own threat modeling for agentic systems, including tool and permission scoping, prompt injection defenses, credential handling, data isolation between customers, and runtime monitoring.

- Lead AI governance for our agent platform, building on our alignment with the EU AI Act and NIST frameworks, including how customer data flows through models and third-party LLM providers.