Chief Information Security Officer (CISO) (Healthcare)

Location: Hybrid role based in New York City or San Francisco, with an expectation to work from the office 2–3 days per week. Candidates must be based in the NYC or SF metro areas or be able to relocate independently within 90 days. Frequent travel to office locations and leadership meetings is required.

Salary: $299,000–$344,000 target base salary per year, plus equity and benefits.

Company

hirify.global is an AI-native mental health company providing personalized support through self-guided tools, coaching, therapy, medication management, and specialty care.

What you will do

• Define and execute enterprise-wide information security, compliance, technology risk, and IT strategy.
• Lead Security Operations, Application and Product Security, cloud and infrastructure security, GRC, identity and access management, corporate IT, and business technology operations.
• Advise executive leadership and the Board on cybersecurity risk, regulatory readiness, enterprise resilience, customer trust, and security investments.
• Oversee security operations, incident response, vulnerability management, threat intelligence, resilience exercises, and secure software development practices.
• Lead compliance programs covering HIPAA, HITRUST, SOC 2, ISO 27001, PCI DSS, GDPR, CCPA, and related healthcare requirements.
• Drive security and IT strategy for the Alma integration, enterprise AI adoption, customer security reviews, and organizational scaling.

Requirements

• 15+ years of progressive experience in information security, cybersecurity, IT, technology risk, or related disciplines, including executive security leadership.
• Experience leading multifunctional security organizations and partnering with corporate IT, business applications, endpoint management, SaaS governance, and access lifecycle teams.
• Deep knowledge of HIPAA and experience operating security and compliance programs in a covered entity or business associate environment.
• Experience with HITRUST, SOC 2, ISO 27001, PCI DSS, GDPR, CCPA, healthcare technology, and sensitive data environments.
• Experience communicating cybersecurity and technology risk to executive and Board-level audiences and leading M&A integration, transformation, IPO readiness, or similarly complex initiatives.
• Strong technical fluency across cloud security, application security, identity and access management, security architecture, threat management, incident response, AI security, and enterprise AI governance.

Nice to have

• Industry certifications such as CISSP, CISM, CCISO, CRISC, CISA, or similar credentials.

Culture & Benefits

• Health, dental, and vision benefits begin on the first day, with HSA and FSA options.
• Employer-sponsored 401(k) match of up to 2%.
• Paid vacation, sick leave, company holidays, and parental leave after six months.
• Access to mental health, fertility, fitness, nutrition, sleep, childcare, and eldercare programs.
• Up to $1,000 per year for professional development and $200 in annual donation matching.