Director, AI Security

Location: Based in the Houston, Texas office under a hybrid working policy; remote candidates may also be considered. Relocation is not provided. Travel may be required up to 25%.

Company

hirify.global provides financial products and services in partnership with financial professionals and institutions.

What you will do

• Own and continuously improve the enterprise AI Security Standard and the technical program that operationalizes it.
• Partner with the Enterprise AI team to align AI security controls with the AI Strategy, AI Standard, approved model reviews, risk tiers, and exception processes.
• Lead security assessments and threat modeling for AI/ML pipelines, generative AI deployments, agentic systems, third-party models, and AI integrations.
• Extend data protection, identity, vulnerability management, access control, logging, and secure orchestration practices to AI environments.
• Lead AI security procurement reviews, regulatory alignment, incident response planning, tabletop exercises, and executive reporting.
• Build and lead a small AI security team or cross-functional working group while enabling engineering, product, and business teams to adopt AI securely.

Requirements

• 10+ years of cybersecurity experience, including 3–5 years focused on data protection, cloud security, or emerging technology risk.
• Experience authoring or operationalizing enterprise AI security, data protection, or data governance standards and governance frameworks.
• Strong knowledge of AI/ML lifecycle risks, generative AI security, agentic AI risk patterns, and AI attack paths.
• Familiarity with NIST AI RMF, ISO/IEC 42001, OWASP Top 10 for LLMs, MITRE ATLAS, EU AI Act, NIST 800-53, and NIST CSF.
• Experience with Microsoft security and identity technologies, vulnerability management platforms, and AI security platforms such as Varonis Atlas.
• Experience in regulated industries and a bachelor’s degree or equivalent experience; CISSP, CCSP, or AI governance certifications are a plus.

Nice to have

• Experience with risk intelligence or GRC platforms that combine vulnerability, asset, and attack-path data.
• Experience with M&A security due diligence, OT/ICS, classified or high-assurance environments, or agent orchestration platforms such as Microsoft Copilot Studio.
• Hands-on experience building AI applications and automating security assessments through workflow platforms, scripting, or AI-enabled solutions.

Culture & Benefits

• Collaborative environment with cross-enterprise partnership and emphasis on continuous learning, innovation, accountability, and inclusion.
• Hybrid work policy with office and remote flexibility.
• Medical, dental, vision, mental health, and wellness programs.
• U.S. 401(k) matching of up to 6% of eligible pay plus a 3% company contribution, subject to plan terms and limits.
• At least 24 paid time-off days for eligible employees, up to 16 annual volunteer hours, employee assistance services, and charitable donation matching up to $5,000.