Fractional Security Leader

Location: Remote, candidates must be located in Latin America

Company

hirify.global provides product and technology leadership together with senior product development teams through a scalable staff augmentation model, focusing on early- and growth-stage technology companies and Latin American talent.

What you will do

• Run an initial security gap assessment across people, tools, and processes.
• Draft and maintain security policies, incident response plans, and risk assessments.
• Harden Google Workspace against the CIS benchmark and strengthen MFA, identity management, MDM, remote wipe, centralized logging, and vulnerability management.
• Prepare the company for client audits and vendor security questionnaires.
• Review client MSA and security addendum language, including liability caps, breach terms, and subprocessor clauses.
• Define secure-coding and DevSecOps practices and build a phased roadmap toward SOC 2.

Requirements

• Experience helping US software development or IT services companies, including staff augmentation firms, development shops, or consultancies.
• Experience establishing security programs from near-zero and preparing small companies of 20–100 people for client audits and vendor questionnaires.
• Hands-on experience with SOC 2 Type 2, NIST CSF, and CIS Controls, with judgment to determine when a lighter framework is appropriate.
• Experience with Google Workspace hardening against the CIS benchmark, MDM and remote wipe, MFA and identity management, centralized logging or SIEM, and vulnerability management.
• Ability to draft policies, incident response plans, and risk assessments and review client MSA and security addendum language.
• Experience with DevSecOps and secure-coding practices for engineers working in client repositories.
• CISSP, CISM, or an equivalent certification.
• Advanced English.
• Familiarity with AI tools.
• Ability to take ownership of projects from start to finish, collaborate effectively, communicate clearly, and maintain attention to detail.

Nice to have

• Experience with remote, distributed, or Latin America-based teams.
• Familiarity with HIPAA, healthcare, and financial-services client requirements.
• Experience working alongside fractional CTOs.

Culture & Benefits

• Remote and flexible work with ongoing part-time dedication.
• US-dollar compensation.
• Personal and professional development through mentorship, coaching, and training.
• A multicultural community of technology experts with an emphasis on meaningful, challenging projects.
• Selective paid training, mentorship programs, and referral programs.