Information Security & GRC Manager (SaaS)

Location: Hybrid, based in San Francisco, United States; office attendance 3 days per week, with Mondays and Wednesdays as anchor days

Salary: $170,000–$220,000 for Tier 1 locations including San Francisco, New York City, and Seattle; $153,000–$198,000 for Tier 2 locations; $144,500–$187,000 for other US locations. Equity included.

Company

hirify.global is a SaaS company that captures how work happens and turns it into specialized intelligence for people and AI agents, serving millions of users and hundreds of thousands of businesses.

What you will do

• Run the SOC 2 program end to end, including control ownership, evidence collection, auditor management, gap closure, and support for additional frameworks.
• Own enterprise customer security reviews, questionnaires, trust center content, security documentation, and security calls with Sales, Customer Success, and Legal.
• Provide Legal with technical input on security commitments in MSAs, DPAs, BAAs, and AI terms, escalating non-standard requests.
• Maintain the risk register, security policies, and vendor security review process, providing leadership with prioritized recommendations.
• Translate audit findings, control requirements, and security issues into engineering work and track remediation through completion.
• Operate internal security programs covering access reviews, security awareness, endpoint and device management, vulnerability management, and incident response readiness.

Requirements

• 6+ years of experience in information security, GRC, or security compliance at a SaaS or technology company, including 2+ years managing individual contributors.
• Hands-on experience running SOC 2 Type II audits as the primary owner.
• Experience with enterprise customer security reviews and questionnaires alongside Sales, Customer Success, and Legal.
• Working knowledge of cloud security, identity and access management, endpoint security, and vulnerability management.
• Experience with GRC automation platforms such as Vanta, Drata, or Secureframe.
• Familiarity with ISO 27001, HIPAA, FERPA, public-sector requirements, and AI governance frameworks such as the EU AI Act and ISO 42001.

Nice to have

• CISSP, CISM, or CISA certification.

Culture & Benefits

• Hybrid work with a San Francisco office schedule of three days per week.
• Equity for all full-time employees.
• Medical, dental, and vision coverage, including two $0/month medical plan options.
• 401(k), flexible paid time off, company holidays, and paid parental leave.
• $500 annual flex benefit for home office equipment, productivity tools, learning and development, or fitness and wellness.
• Commuter benefits for San Francisco employees and family and wellness support programs.