IT Security Lead

Location: Hybrid in Atlanta, GA; applicants must be located in the US and authorized to work for any employer in the United States. Visa sponsorship is not available.

Company

hirify.global provides a unified healthcare workforce management software platform used by more than 4,500 healthcare organizations, with more than 800 employees across the US.

What you will do

• Lead IT security operations, enterprise security strategy, and GRC initiatives across IT systems, infrastructure, SaaS applications, identity, endpoints, and networks.
• Assess control effectiveness and attack surface, define security metrics, report security posture to executive leadership, and drive remediation with system owners.
• Provide security guidance to IT Systems Administrators and Help Desk teams and integrate security into enterprise IT projects, system changes, and operational processes.
• Lead vulnerability management, including scanning, risk-based prioritization, remediation coordination, patching, and validation of fixes.
• Lead internal and external security audits and compliance assessments, including control mapping, evidence collection, gap analysis, remediation tracking, and audit readiness.
• Improve GRC operations through automated control testing, evidence collection, continuous monitoring, incident preparedness, response coordination, and security awareness guidance.

Requirements

• At least 5 years of experience in IT security, GRC, security engineering, security operations, or a related field.
• Bachelor’s degree from an accredited college or university.
• Experience securing enterprise IT environments across identity and access management, endpoints, SaaS applications, network infrastructure, and macOS and Windows environments.
• Experience with enterprise security and IT platforms such as Okta, Zscaler, CrowdStrike, Google Workspace, Microsoft, Jamf, Intune, and Meraki, or comparable tools.
• Understanding of enterprise risk management and GRC, with the ability to apply NIST, ISO 27001, SOC 1, SOC 2, SOX, HIPAA, and FedRAMP requirements to practical security controls.
• Experience leading or supporting security audits and compliance assessments in highly regulated environments, including working with auditors, mapping controls, gathering evidence, remediating gaps, and monitoring controls.
• Experience managing vulnerability programs, including scanning, risk prioritization, remediation coordination, patching, and validation.
• Experience assessing security risks in SaaS applications, internal AI tools, and emerging technologies, including configuration, access, data exposure, vulnerabilities, and impacts to existing controls.
• Experience supporting incident response and security awareness, communicating effectively with technical and nontechnical stakeholders, and explaining cybersecurity risks.

Nice to have

• Familiarity with GRC automation and continuous monitoring platforms such as Vanta.
• Familiarity with vulnerability management tools such as Tenable.
• Ability to use AI and machine learning to improve security workflows while maintaining human oversight and critical judgment.

Culture & Benefits

• Collaborative environment focused on growth, innovation, inclusion, diversity, equity, and measurable customer impact.
• Company-paid medical, dental, and vision insurance options, including in-person and virtual care.
• Paid time off, paid parental leave, and a 401(k) with company match.
• Annual Costco membership, cell phone stipend, commuter benefits, and in-office perks.
• Full-time employee benefits support personal well-being and family needs.