Director of Security Compliance

Location: United States; remote

Salary: $200,000–$230,000 base salary, plus equity

Company

hirify.global is a virtual medical practice providing 24/7 technology-enabled care across pregnancy, postpartum, pediatrics, menopause, and perimenopause.

What you will do

• Define and own the enterprise-wide security strategy, policy framework, standards, risk appetite, and compliance requirements.
• Lead SOC 2 Type II and HITRUST certification lifecycles from readiness through audit, including auditor management and evidence collection.
• Run security compliance operations covering access governance, user access reviews, HIPAA Security Risk Assessments, security awareness training, policies, procedures, and control monitoring.
• Act as the security Design Authority and partner with engineering leadership to align technical roadmaps with enterprise security strategy.
• Oversee technical risk management, third-party security assessments, vendor requirements, and security due diligence for health plan partners.
• Own the Incident Response Plan, coordinate compliance communications, and report security risk posture and program maturity to executive leadership.

Requirements

• 8+ years of Information Security experience, including at least 3 years in a leadership or GRC-focused role.
• Direct healthcare experience and deep knowledge of HIPAA, especially the Security Rule, HITECH, and applicable state privacy and security laws such as CCPA/CPRA.
• Proven experience personally leading SOC 2 and HITRUST i1 or r2 certification cycles.
• Technical fluency in cloud environments, preferably GCP, CI/CD pipelines, and modern security tooling; software engineering experience is not required.
• Strong communication, project management, and cross-functional leadership skills across engineering, product, operations, executive, and external partner groups.

Nice to have

• CISSP, CISM, or CISA certification.
• Experience in a high-growth startup environment.

Culture & Benefits

• Equity participation provides an ownership stake in hirify.global’s mission.
• Collaborative, inclusive, and respectful environment focused on improving maternal and infant health outcomes.
• Cross-disciplinary work with clinicians, technologists, operators, and problem-solvers.
• Data-driven decision-making, continuous learning, and a patient-first approach.