Lead, GRC & Security Governance

Location: Remote within the United States; team members may live and work anywhere in the United States except Hawaii.

Salary: $174,000–$224,000 per year, plus equity.

Company

hirify.global is a virtual-first fintech building affordable, transparent financial products for Americans underserved by traditional financial institutions, including ExtraCash and planned BNPL offerings.

What you will do

• Build and operate technology governance across technology and cyber risk, IT controls, change management, incident management, business continuity, and policies.
• Maintain the technology control inventory, including control owners, evidence requirements, operating cadence, exceptions, and escalation paths.
• Lead technology assurance and audit readiness for SOX ITGC, PCI, SOC 2, and other applicable frameworks.
• Own the technology and cyber risk register and control exception process, escalating material or sustained risks with clear recommendations.
• Govern change management, incident management, and business continuity programs so they are consistently followed, tested, and improved.
• Use AI and automation for evidence analysis, control mapping, policy maintenance, risk reporting, audit preparation, and remediation tracking with appropriate human review and data safeguards.

Requirements

• 8+ years of relevant technology experience, including significant ownership in security governance, technology risk, or security assurance.
• Personally led a SOC 2 Type II, ISO 27001, or equivalent audit to a successful result.
• Built or materially rebuilt a governance, risk, or assurance operating model.
• Strong technical fluency across cloud, identity, CI/CD, source control, endpoints, networks, and data platforms.
• Experience influencing Engineering, SRE, Security, IT, and Data teams while maintaining remediation accountability and partnering with Internal Audit and Legal.
• Strong judgment around risk and materiality, written communication, and program management.

Nice to have

• Experience with SOX ITGC, PCI DSS, NIST-based programs, AI governance, third-party AI risk, or GRC automation platforms such as Vanta or Drata.

Culture & Benefits

• Virtual-first work culture with flexible hours and a home office stipend.
• Premium medical, dental, and vision insurance.
• Paid parental and caregiver leave, flexible PTO, and company holidays.
• 401(k) savings plan with matching contributions.
• Financial advisor and financial wellness support.
• All-company in-person events once or twice a year, with additional virtual events.