Senior Security Assurance Engineer (AI)

Location: Remote, United States

Salary: $139,200–$196,000 USD base salary per year

Company

hirify.global provides an intelligent orchestration platform for DevSecOps, helping organizations improve developer productivity, operational efficiency, security, compliance, and digital transformation.

What you will do

• Design, document, maintain, and test IT general and security controls across corporate applications, identity infrastructure, security tooling, engineering systems, and third-party SaaS.
• Map shared controls and evidence across SOX ITGC, SOC 2, ISO 27001, ISO 42001, NIST CSF, PCI-DSS, privacy regulations, and customer commitments.
• Partner with IT, Corporate Security, Engineering, Finance, Security Governance, Internal Audit, Legal, and Privacy teams as the compliance liaison.
• Define control expectations for AI tools, agents, and integrations, including data handling, access scope, human review, logging, evidence, and escalation requirements.
• Run access reviews, privileged-access checks, segregation-of-duties reviews, change-management testing, and configuration-baseline monitoring.
• Manage audit evidence and SOX ITGC certification requests, automate recurring evidence collection, and lead remediation of control deficiencies.

Requirements

• At least 5 years of experience in IT compliance, security compliance, IT audit, information security, or information technology.
• Experience testing and documenting controls against COSO, COBIT, NIST CSF, ISO 27001, SOC 2, and SOX ITGC frameworks, including direct work with auditors.
• Experience assessing controls in SaaS and cloud-native application environments.
• Working knowledge of identity and access management, including SSO, SCIM, RBAC, privileged access, and joiner/mover/leaver processes.
• Understanding of AI governance and control considerations for AI tools, agents, and integrations.
• Strong written and verbal communication, with the ability to work credibly with leadership, engineering, auditors, and legal stakeholders.

Nice to have

• Big Four or external audit experience.
• Certifications such as CISA, CISSP, CRISC, or CISM.
• Experience with usage-based billing, subscription management, metering, entitlement services, compliance automation, continuous control monitoring, or enterprise AI standards.
• Prior experience in a Security Assurance or GRC function supporting both corporate IT and product engineering.

Culture & Benefits

• Fully remote work with location-based eligibility determined by the role.
• Health, financial, and well-being benefits.
• Flexible paid time off and parental leave.
• Equity compensation and an employee stock purchase plan.
• Growth and Development Fund and Team Member Resource Groups.