Product Security Governance Principal (Cybersecurity)

Location: Virtual, Ohio, United States; position not eligible for immigration sponsorship.

Base salary: $96,500–$207,500 USD annually, plus eligibility for incentive compensation.

Company

hirify.global is a banking and financial services organization.

What you will do

• Lead and mature Product Security governance for customer-facing software, APIs, SDKs, integrations, and related services.
• Define governance criteria, review expectations, decision authorities, escalation paths, evidence standards, and supporting documentation.
• Build a scalable customer assurance model, including security summaries, whitepapers, assessment responses, and evidence traceability.
• Coordinate Product Security activities for SOC 2 readiness, including scoping, gap assessments, evidence collection, and action tracking.
• Evaluate product security evidence from threat modeling, penetration testing, vulnerability scanning, secure development, supply chain security, incident management, and remediation.
• Lead governance forums and provide recommendations to technical teams, business stakeholders, and senior leaders.

Requirements

• Seven or more years of progressively responsible experience in Product Security, security governance, cybersecurity assurance, IT risk, security compliance, technology audit, security architecture, or a related discipline.
• Experience leading security governance, assurance, readiness, control evaluation, gap analysis, or evidence-review practices in a complex organization.
• Ability to evaluate technical and nontechnical evidence, identify material concerns, exercise sound judgment, and recommend defensible decisions.
• Experience translating security and compliance requirements into practical expectations for product and engineering teams.
• Strong understanding of administrative, technical, and operational security controls throughout the product lifecycle.
• Bachelor’s degree in cybersecurity, information technology, information systems, business, accounting, or a related field, or equivalent education and experience.

Nice to have

• Experience building or maturing Product Security programs in financial services, regulated industries, or complex enterprises.
• Experience with SOC 2 readiness, Trust Services Criteria, customer assurance materials, SaaS platforms, cloud-native services, or distributed products.
• Familiarity with ISO/IEC 27001, NIST CSF, PCI DSS, cloud shared-responsibility models, and modern software development.
• Credentials such as CISSP, CISA, CISM, CRISC, CCSP, or ISO 27001 Lead Implementer or Auditor.

Culture & Benefits

• Virtual work arrangement within the United States.
• Comprehensive benefits supporting physical, financial, emotional, and social well-being.
• Base compensation varies by relevant skills, experience, education, and geographic location.
• Eligibility for an incentive compensation plan based on company, business-line, and individual performance.
• Inclusive culture and equal employment opportunity practices.