Director, Information Security + Compliance (AI)

Location: New York, NY; hybrid role with 3 days per week in the NYC office.

Base pay range: $210,000–$230,000 USD per year, plus incentive bonus, stock options, benefits, and applicable incentive pay.

Company

hirify.global is a specialty substance use and mental health care provider using clinically driven technology and AI to expand access to personalized treatment.

What you will do

• Own SOC 2 Type II and HITRUST certification, including audits, remediation, evidence collection, and recertification.
• Set the security strategy, roadmap, budget, tooling, and executive and Board risk reporting.
• Lead client security reviews, RFPs, questionnaires, partner due diligence, vendor risk reviews, and AI tool assessments.
• Own incident response, vulnerability management, penetration testing, access reviews, and continuous control monitoring.
• Partner with Engineering, IT, and Legal on cloud security, disaster recovery, secure design, IAM, HIPAA, GDPR, BAAs, and breach assessments.
• Lead and grow the security function as a player-coach, initially managing 1–2 direct reports and building security literacy across the organization.

Requirements

• Direct accountability for SOC 2 Type II and HITRUST outcomes.
• Information security and compliance leadership experience in healthcare, health tech, or another regulated industry, with strong working knowledge of HIPAA.
• Cloud security expertise with AWS, infrastructure as code, containers, and CI/CD.
• Working knowledge of GRC, security operations, application security, and identity and access management.
• Player-coach leadership experience, sound commercial risk judgment, and the ability to communicate with engineers, clients, auditors, executives, and the Board.
• Visa sponsorship is not available for this position.

Nice to have

• Experience securing AI or LLM systems, agentic tools, or model-workflow data.
• Experience scaling a security program at a Series B or C company.
• CISSP, CISM, CCSP, or HITRUST CCSFP certification.
• Experience with US health plans, PBMs, or large self-insured employers.

Culture & Benefits

• Outcome-driven, AI-native, highly autonomous, and cross-functional engineering environment.
• Focus on quality, safety, reliability, observability, and correctness in a regulated member-impacting domain.
• Equity package, medical, dental, and vision coverage, and a 401(k) plan.
• Unlimited PTO, 10 paid holidays, company-wide Me Time Days, and paid parental leave.
• Learning and development stipend, wellness reimbursement, reproductive and family planning care, and substance use support for employees and family members.