Назад
Company hidden
13 дней назад

Director, Security and Compliance (Cybersecurity)

251 263 - 265 592$
Формат работы
onsite
Тип работы
fulltime
Грейд
director
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Director, Security and Compliance (Cybersecurity): Designing and scaling global information security and regulatory compliance programs with an accent on GRC strategy, security operations, audit readiness, and executive risk reporting. Focus on translating regulatory requirements into testable technical controls, leading incident response and third-party risk management, and building security and compliance teams.

Location: South San Francisco, California, USA

Base cash compensation: $251,263–$265,592 USD annually, plus bonus, equity, and benefits.

Company

hirify.global develops a silicon-based DNA synthesis platform for genomics applications in healthcare, agriculture, industrial chemicals, and data storage.

What you will do

  • Define, implement, and continuously monitor security and compliance frameworks including SOC 2, ISO 27001, NIST CSF, PCI DSS, and HIPAA.
  • Lead enterprise risk assessments, security policy architecture, privacy compliance, and remediation planning with business stakeholders.
  • Oversee infrastructure security, IAM, encryption, incident response, regulatory disclosures, and third-party risk management.
  • Manage internal and external audits, evidence collection, auditor relationships, and control alignment across overlapping frameworks.
  • Represent the company’s security posture in customer security reviews and translate technical risk into metrics for executives and the Board.
  • Recruit, mentor, and manage security analysts and compliance professionals while developing security awareness programs.

Requirements

  • 10+ years of experience in information security, risk management, or compliance, including 5+ years in leadership or management.
  • BS/MS in Computer Science, Information Systems, Cybersecurity, Business, or equivalent practical experience.
  • Strong familiarity with AWS or similar cloud environments and compliance automation platforms such as Vanta, Drata, or Anecdotes.
  • Experience achieving and maintaining SOC 2 Type II or ISO 27001 certifications from the ground up.
  • Ability to communicate complex technical and regulatory topics to engineers, business stakeholders, executives, and board members.
  • Relevant certifications such as CISSP, CISM, CISA, CRISC, or CIPP are preferred.

Nice to have

  • CISSP, CISM, CISA, CRISC, or CIPP certification.

Culture & Benefits

  • Eligibility for bonus compensation and equity.
  • Generous benefits package.
  • Equal employment opportunity environment.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →