Director of Security

Location: 100% remote within the United States; permanent US residency is required for current and continued employment. The company is headquartered in Glastonbury, Connecticut.

Company

hirify.global provides an integrated education technology platform for K–12 schools and districts, including websites, communications, mobile apps, enrollment, and marketing services.

What you will do

• Lead, hire, develop, and manage the security team, including performance reviews and promotion recommendations.
• Build and execute the security roadmap across compliance, customer trust, application security, cloud infrastructure, vendor risk, identity, and access.
• Lead the SOC 2 Type 2 attestation, including control assessment, remediation, observation-period evidence collection, and auditor coordination.
• Own Vanta and maintain the customer trust portal, security documentation, customer questionnaires, and external assessments.
• Lead security incident response, vulnerability management, threat modeling, secure design reviews, and post-incident follow-up.
• Partner with SRE, identity, platform, sales, customer success, legal, and executive stakeholders on risk decisions, security controls, and AI-enabled product assessments.

Requirements

• 8+ years of information security experience, including 3+ years leading a security team.
• Hands-on technical credibility across application security and cloud infrastructure.
• Direct experience leading a SOC 2 Type 2 audit or comparable attestation such as ISO 27001.
• Experience with customer security reviews, third-party vendor risk assessments, and real security incident response.
• Experience partnering with a CISO or executive risk owner and preparing clear security decisions.
• Must be a permanent resident of the United States and remain resident in the US during employment.

Nice to have

• Experience with Vanta, Drata, Secureframe, or a customer-facing trust center.
• Leading a company's first SOC 2 Type 2 attestation.
• Security leadership in a multi-product SaaS company or an organization with acquisitions.
• PCI DSS, student or children's data privacy, multi-cloud security, identity and access security, or K–12 experience.
• Experience assessing AI-enabled product security and privacy risks.

Culture & Benefits

• Fully remote employment within the United States.
• Competitive benefits and professional development opportunities.
• Collaborative work with distributed colleagues across multiple countries and time zones.
• Opportunity to contribute to education technology serving more than 7,000 schools and districts.